Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-04-08...uk.exe

windows7-x64

1

2024-04-08...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-08_48054a13a8c0a6763aa8e7d9f4d34333_ryuk

  • Size

    2.2MB

  • Sample

    240408-q4l4yaae65

  • MD5

    48054a13a8c0a6763aa8e7d9f4d34333

  • SHA1

    a6ea43f9803c1537eed4f1e687b8dc3f75fad347

  • SHA256

    2aadd272e825ee956c82131a2a7521c615b9602e2588f41c058384affc7c29d7

  • SHA512

    ec56314c3a633bfdf0d9dcf9ec9ecf3915ee77dcca6138924f6b060b7c8af8642d8a2cdfd8e55172b443aa31ae270d3ad18856b74f7e10ce7bef4f68a1fccabd

  • SSDEEP

    49152:iWWu1zKeIxNj2bchBluP3GiyBKD2gDUYmvFur31yAipQCtXxc0H:iWBMNj3ZoHU7dG1yfpVBlH

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-08_48054a13a8c0a6763aa8e7d9f4d34333_ryuk

    • Size

      2.2MB

    • MD5

      48054a13a8c0a6763aa8e7d9f4d34333

    • SHA1

      a6ea43f9803c1537eed4f1e687b8dc3f75fad347

    • SHA256

      2aadd272e825ee956c82131a2a7521c615b9602e2588f41c058384affc7c29d7

    • SHA512

      ec56314c3a633bfdf0d9dcf9ec9ecf3915ee77dcca6138924f6b060b7c8af8642d8a2cdfd8e55172b443aa31ae270d3ad18856b74f7e10ce7bef4f68a1fccabd

    • SSDEEP

      49152:iWWu1zKeIxNj2bchBluP3GiyBKD2gDUYmvFur31yAipQCtXxc0H:iWBMNj3ZoHU7dG1yfpVBlH

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks