Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-05_3006ccfb8d31ecce12eba32f8c389fff_ryuk

  • Size

    1.7MB

  • Sample

    240405-nnx56aaf3x

  • MD5

    3006ccfb8d31ecce12eba32f8c389fff

  • SHA1

    ada1ccb6c5f94b3d22c4acf79f3891a52f5a77de

  • SHA256

    0aec1faf1416e654dd0402090fbc55765622db9fc84b666c1a6638580aea0dc3

  • SHA512

    1eed955b5084ecad14564c13c67455f383703ce02a667526f4ded0f74783c0ceb5cda3d5625ba0e3156450a461e836f2f24126dcff0ecf4cd2290c39f7b6b84e

  • SSDEEP

    49152:4gtHUujpj7AewZkZhRdhEl9dOq18F5/oN6M50R:rFhxZhG9y55M50

Score
7/10

Malware Config

Targets

    • Target

      2024-04-05_3006ccfb8d31ecce12eba32f8c389fff_ryuk

    • Size

      1.7MB

    • MD5

      3006ccfb8d31ecce12eba32f8c389fff

    • SHA1

      ada1ccb6c5f94b3d22c4acf79f3891a52f5a77de

    • SHA256

      0aec1faf1416e654dd0402090fbc55765622db9fc84b666c1a6638580aea0dc3

    • SHA512

      1eed955b5084ecad14564c13c67455f383703ce02a667526f4ded0f74783c0ceb5cda3d5625ba0e3156450a461e836f2f24126dcff0ecf4cd2290c39f7b6b84e

    • SSDEEP

      49152:4gtHUujpj7AewZkZhRdhEl9dOq18F5/oN6M50R:rFhxZhG9y55M50

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks