Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
92s -
max time network
113s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
18/04/2024, 10:11
General
-
Target
2024-04-18_2dff8c3181a2e2af663300e7ce2bc467_ryuk.exe
-
Size
1.9MB
-
MD5
2dff8c3181a2e2af663300e7ce2bc467
-
SHA1
26953f79d74c06042d50d778c341bdf83534e71e
-
SHA256
c681d527eb92a7d7841c2a5e365e4dd810ac77be0ca94c991c05f31f2680dac7
-
SHA512
d62cbb4de563fea9b12e2e63f8397cc3863e125e950b65e4ffe3c4a73b2c2cfde25c2fa231f1e46c05edd5825ae59b7de5a7fa63acbd1396b7ff7787228004dc
-
SSDEEP
49152:nlOVDTtQY6SoNtaUJ67UnHpclbwbWAaJiwmqTjco1f9Ckt7c20+9qNxUW:4qSUHxqPFLfEkKK90
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-18_2dff8c3181a2e2af663300e7ce2bc467_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-18_2dff8c3181a2e2af663300e7ce2bc467_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
2.0MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.0MB