Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
23/04/2024, 19:03
General
-
Target
2024-04-23_a62bc305bdc0068323b37c9e2474eaab_cobalt-strike_ryuk.exe
-
Size
781KB
-
MD5
a62bc305bdc0068323b37c9e2474eaab
-
SHA1
fc2cdf5896d849741c0f366c491d9434898549a1
-
SHA256
c81291ec8133f01f85324945132ef3d6afb810f7ded4b549eb4c04704ab0b302
-
SHA512
60a950c581dc213315f845966981dd194230f04a24b0275e477e6f95a5aa6ba4c600fa98ba1b468ce1dddc0d13428529003f11df354d4fb5d4506580ac733c9a
-
SSDEEP
24576:HPsJcuiE/i328ab4F+rM/aXq6bJfBUam6:Hwcu3/i3da1YS6ozB
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-23_a62bc305bdc0068323b37c9e2474eaab_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-23_a62bc305bdc0068323b37c9e2474eaab_cobalt-strike_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
808KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
808KB