Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-22_701e1640c81d84bbce7f5346692b57c4_cobalt-strike_ryuk

  • Size

    781KB

  • Sample

    240422-sazt2sce28

  • MD5

    701e1640c81d84bbce7f5346692b57c4

  • SHA1

    2a10eb0185b222fa6bb516d1cfea287b72d1359d

  • SHA256

    9dad1dad9673954e1bd2ac97d509470f11557c0f0f12bc2589b29fcf8edb30e1

  • SHA512

    33214247d0f53aa4c53f011a6f324dcd0d46cfc7e54b11c6be38fcc738f2596824749b4158888e1ff9fd6c9b9be9463fee773a7ee22f8b666904ddb9409e71db

  • SSDEEP

    24576:hPsJcuiP/i328ab4F+rM/aXq6bJfBUam6:hwcuQ/i3da1YS6ozB

Score
7/10

Malware Config

Targets

    • Target

      2024-04-22_701e1640c81d84bbce7f5346692b57c4_cobalt-strike_ryuk

    • Size

      781KB

    • MD5

      701e1640c81d84bbce7f5346692b57c4

    • SHA1

      2a10eb0185b222fa6bb516d1cfea287b72d1359d

    • SHA256

      9dad1dad9673954e1bd2ac97d509470f11557c0f0f12bc2589b29fcf8edb30e1

    • SHA512

      33214247d0f53aa4c53f011a6f324dcd0d46cfc7e54b11c6be38fcc738f2596824749b4158888e1ff9fd6c9b9be9463fee773a7ee22f8b666904ddb9409e71db

    • SSDEEP

      24576:hPsJcuiP/i328ab4F+rM/aXq6bJfBUam6:hwcuQ/i3da1YS6ozB

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks