Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
11/04/2024, 13:24
General
-
Target
2024-04-11_93c3263fc2104463d76831a89128e4d8_ryuk.exe
-
Size
3.4MB
-
MD5
93c3263fc2104463d76831a89128e4d8
-
SHA1
16d87b4e9869f444431c5e7c43ace35c197f3211
-
SHA256
6dbe5075dcc231b42afeea49379235f12f1b9ee8b96c598964ff01ab67333a26
-
SHA512
101299b36ee69d368c92004fa1028ccd6b33fb1c01d52bba4252a1a2f7ac1a6c730c82e4743864f4a129da712233ad22f1d321e4cd796eeb6f06b27c3f0b4dec
-
SSDEEP
49152:3Q+UuuLhdDM3xt+5YqcYsdJE1fyMt4cltQsx2eoqo5rN1ggWrJSdj5ixMdFrIe7y:3Qv5o7FeW5rN1UEj7TjYvH
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-11_93c3263fc2104463d76831a89128e4d8_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-11_93c3263fc2104463d76831a89128e4d8_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.5MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
3.5MB