Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-22_0273904df8ec31f2c753902105b6ee72_ryuk

  • Size

    5.5MB

  • Sample

    240422-s5xm6sch95

  • MD5

    0273904df8ec31f2c753902105b6ee72

  • SHA1

    f39fa41bb5c31a56421758d67feff1d3f447e973

  • SHA256

    fbf8bcad72e172f48ee04b2958e9149047de9694291ba3969ed3b09b26c414b9

  • SHA512

    d35069a7da46d02ced6f2abeb853063ef6255b749ee954c30ff6013c0e854728119f9164548de55d28c5153047758f2838bc5135c7f563b004ced941f84ce3db

  • SSDEEP

    98304:9AI5pAdVJn9tbnR1VgBVmoU7dG1yfpVBlH:9AsCh7XYBUoiPBx

Score
7/10

Malware Config

Targets

    • Target

      2024-04-22_0273904df8ec31f2c753902105b6ee72_ryuk

    • Size

      5.5MB

    • MD5

      0273904df8ec31f2c753902105b6ee72

    • SHA1

      f39fa41bb5c31a56421758d67feff1d3f447e973

    • SHA256

      fbf8bcad72e172f48ee04b2958e9149047de9694291ba3969ed3b09b26c414b9

    • SHA512

      d35069a7da46d02ced6f2abeb853063ef6255b749ee954c30ff6013c0e854728119f9164548de55d28c5153047758f2838bc5135c7f563b004ced941f84ce3db

    • SSDEEP

      98304:9AI5pAdVJn9tbnR1VgBVmoU7dG1yfpVBlH:9AsCh7XYBUoiPBx

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks