Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-05_e74c470f0d96f676c6c4ec5050c572a5_ryuk

  • Size

    3.2MB

  • Sample

    240405-q2zl9aeb43

  • MD5

    e74c470f0d96f676c6c4ec5050c572a5

  • SHA1

    be451a9c79e750f8153b0023315a3247065b6057

  • SHA256

    72f9381794449071c705d08a8ba6de38922ab4322215f18310ebfdc0f2a573b0

  • SHA512

    4042575dcf47e4ffd63e74a335112823875340a5c53c171aae9761637b9b6127c1b62a6c78629431aea8b0c1cdf58946814d4345f23dacb25e251f286ef4d50a

  • SSDEEP

    49152:Y5k1YCdptya507NUUWn043oHS3fTIYwVq1/xT3DDbw0TUqy8kQ/qoLEw:+NhSMYw8yEqo4w

Score
7/10

Malware Config

Targets

    • Target

      2024-04-05_e74c470f0d96f676c6c4ec5050c572a5_ryuk

    • Size

      3.2MB

    • MD5

      e74c470f0d96f676c6c4ec5050c572a5

    • SHA1

      be451a9c79e750f8153b0023315a3247065b6057

    • SHA256

      72f9381794449071c705d08a8ba6de38922ab4322215f18310ebfdc0f2a573b0

    • SHA512

      4042575dcf47e4ffd63e74a335112823875340a5c53c171aae9761637b9b6127c1b62a6c78629431aea8b0c1cdf58946814d4345f23dacb25e251f286ef4d50a

    • SSDEEP

      49152:Y5k1YCdptya507NUUWn043oHS3fTIYwVq1/xT3DDbw0TUqy8kQ/qoLEw:+NhSMYw8yEqo4w

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks