Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-23_a62bc305bdc0068323b37c9e2474eaab_cobalt-strike_ryuk

  • Size

    781KB

  • Sample

    240423-xqpq8sba66

  • MD5

    a62bc305bdc0068323b37c9e2474eaab

  • SHA1

    fc2cdf5896d849741c0f366c491d9434898549a1

  • SHA256

    c81291ec8133f01f85324945132ef3d6afb810f7ded4b549eb4c04704ab0b302

  • SHA512

    60a950c581dc213315f845966981dd194230f04a24b0275e477e6f95a5aa6ba4c600fa98ba1b468ce1dddc0d13428529003f11df354d4fb5d4506580ac733c9a

  • SSDEEP

    24576:HPsJcuiE/i328ab4F+rM/aXq6bJfBUam6:Hwcu3/i3da1YS6ozB

Score
7/10

Malware Config

Targets

    • Target

      2024-04-23_a62bc305bdc0068323b37c9e2474eaab_cobalt-strike_ryuk

    • Size

      781KB

    • MD5

      a62bc305bdc0068323b37c9e2474eaab

    • SHA1

      fc2cdf5896d849741c0f366c491d9434898549a1

    • SHA256

      c81291ec8133f01f85324945132ef3d6afb810f7ded4b549eb4c04704ab0b302

    • SHA512

      60a950c581dc213315f845966981dd194230f04a24b0275e477e6f95a5aa6ba4c600fa98ba1b468ce1dddc0d13428529003f11df354d4fb5d4506580ac733c9a

    • SSDEEP

      24576:HPsJcuiE/i328ab4F+rM/aXq6bJfBUam6:Hwcu3/i3da1YS6ozB

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks