Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-04-11...uk.exe

windows7-x64

5

2024-04-11...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-11_93c3263fc2104463d76831a89128e4d8_ryuk

  • Size

    3.4MB

  • Sample

    240411-qndgvsfe41

  • MD5

    93c3263fc2104463d76831a89128e4d8

  • SHA1

    16d87b4e9869f444431c5e7c43ace35c197f3211

  • SHA256

    6dbe5075dcc231b42afeea49379235f12f1b9ee8b96c598964ff01ab67333a26

  • SHA512

    101299b36ee69d368c92004fa1028ccd6b33fb1c01d52bba4252a1a2f7ac1a6c730c82e4743864f4a129da712233ad22f1d321e4cd796eeb6f06b27c3f0b4dec

  • SSDEEP

    49152:3Q+UuuLhdDM3xt+5YqcYsdJE1fyMt4cltQsx2eoqo5rN1ggWrJSdj5ixMdFrIe7y:3Qv5o7FeW5rN1UEj7TjYvH

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-11_93c3263fc2104463d76831a89128e4d8_ryuk

    • Size

      3.4MB

    • MD5

      93c3263fc2104463d76831a89128e4d8

    • SHA1

      16d87b4e9869f444431c5e7c43ace35c197f3211

    • SHA256

      6dbe5075dcc231b42afeea49379235f12f1b9ee8b96c598964ff01ab67333a26

    • SHA512

      101299b36ee69d368c92004fa1028ccd6b33fb1c01d52bba4252a1a2f7ac1a6c730c82e4743864f4a129da712233ad22f1d321e4cd796eeb6f06b27c3f0b4dec

    • SSDEEP

      49152:3Q+UuuLhdDM3xt+5YqcYsdJE1fyMt4cltQsx2eoqo5rN1ggWrJSdj5ixMdFrIe7y:3Qv5o7FeW5rN1UEj7TjYvH

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks