Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-27_935f1f2371fa80218a8e0b8ab8ec4bc4_ryuk

  • Size

    5.5MB

  • Sample

    240427-w7e3paef4s

  • MD5

    935f1f2371fa80218a8e0b8ab8ec4bc4

  • SHA1

    53bb9e154372205a4d56f7d5f65da17cb958f804

  • SHA256

    90f8457cc72de32faf5361168b9e76859fe9a066bb3a8ed61f1e0e181f4ae152

  • SHA512

    ca6ade59fdd2ee5e98ac97d611ad6e9a5a171315c1dc237ba871767e49c75603873c53d3dfd4c2c781d8b8c90adb02a028b7fc24ed0cb378f36e196d0a8db3ec

  • SSDEEP

    49152:EEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfD:iAI5pAdVJn9tbnR1VgBVmhfFPfUNF

Score
7/10

Malware Config

Targets

    • Target

      2024-04-27_935f1f2371fa80218a8e0b8ab8ec4bc4_ryuk

    • Size

      5.5MB

    • MD5

      935f1f2371fa80218a8e0b8ab8ec4bc4

    • SHA1

      53bb9e154372205a4d56f7d5f65da17cb958f804

    • SHA256

      90f8457cc72de32faf5361168b9e76859fe9a066bb3a8ed61f1e0e181f4ae152

    • SHA512

      ca6ade59fdd2ee5e98ac97d611ad6e9a5a171315c1dc237ba871767e49c75603873c53d3dfd4c2c781d8b8c90adb02a028b7fc24ed0cb378f36e196d0a8db3ec

    • SSDEEP

      49152:EEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfD:iAI5pAdVJn9tbnR1VgBVmhfFPfUNF

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks