Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
22/04/2024, 06:54
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-22_6cdbdb5de8b58222de44ed4565003189_ryuk.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-22_6cdbdb5de8b58222de44ed4565003189_ryuk.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-04-22_6cdbdb5de8b58222de44ed4565003189_ryuk.exe
-
Size
1.8MB
-
MD5
6cdbdb5de8b58222de44ed4565003189
-
SHA1
a673d761850e256f0cc4adc4449f693103b0e43d
-
SHA256
9c745ccc9ab5fa30dddc61b144b7f2f9ff406238d17616749ffb9d0cb10f76ed
-
SHA512
bfbd8b27ac912bf96e8f13a7d9d0bcc3315decc655e9a874f26962cb503b3ba12c5d943996bac4f0b6483bd54fc8abc40b6a8d007c29f328ab72229f6bd4ac51
-
SSDEEP
24576:hdWi8vr3qTv6iJ2JbtOotZYes5Lm9r1585+bTFoDSKT5KVGlY:p8z3qb6IJotaesVm9ZK+bTQzQ
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-22_6cdbdb5de8b58222de44ed4565003189_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-22_6cdbdb5de8b58222de44ed4565003189_ryuk.exe"1⤵PID:652
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3716 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:81⤵PID:4280