Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-15_38f7909126ca47db11dec56ab003f9bd_cobalt-strike_ryuk
-
Size
796KB
-
Sample
240415-hxszxabf9w
-
MD5
38f7909126ca47db11dec56ab003f9bd
-
SHA1
3629ed274d9346d42147eae46bbaee3947f7c36a
-
SHA256
1f1c14c846ba62900aefc7ac169ba758a307fe0c6e83db4bd6a27c2d6d1f6eea
-
SHA512
650b1e9ff05f8f7162dc359d7c32de6a2aae08af38b267eff6262bc031035dad94b9f409c5a6ab114c71a923f5ac6c24a96989fc5d78452aacc32f6cf2341f87
-
SSDEEP
24576:jANw243Ee1g6p7HF/w/ftDsBUiScD7WGfWVbvf4CNQE:jew2ZmgiTd8DsMcDKGfWbYCGE
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-15_38f7909126ca47db11dec56ab003f9bd_cobalt-strike_ryuk.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-04-15_38f7909126ca47db11dec56ab003f9bd_cobalt-strike_ryuk.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-15_38f7909126ca47db11dec56ab003f9bd_cobalt-strike_ryuk
-
Size
796KB
-
MD5
38f7909126ca47db11dec56ab003f9bd
-
SHA1
3629ed274d9346d42147eae46bbaee3947f7c36a
-
SHA256
1f1c14c846ba62900aefc7ac169ba758a307fe0c6e83db4bd6a27c2d6d1f6eea
-
SHA512
650b1e9ff05f8f7162dc359d7c32de6a2aae08af38b267eff6262bc031035dad94b9f409c5a6ab114c71a923f5ac6c24a96989fc5d78452aacc32f6cf2341f87
-
SSDEEP
24576:jANw243Ee1g6p7HF/w/ftDsBUiScD7WGfWVbvf4CNQE:jew2ZmgiTd8DsMcDKGfWbYCGE
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
-