Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
28/04/2024, 10:03
General
-
Target
2024-04-28_2380a8b5b1a8be837915fc532ca92346_ryuk.exe
-
Size
1.0MB
-
MD5
2380a8b5b1a8be837915fc532ca92346
-
SHA1
3a53592711b050bdb49d7ff81af7b90370f7ddda
-
SHA256
299d1614f76d97ebe81dfe955d046a539ce5b0cdf12633c735fcdd6316026dbc
-
SHA512
31798d35a8c7b3f0b0cde40683f7039e2e7a90e086a85f7024d045718e334d9f8e8d45363fa4eaa178f0d792e89794128d814f089f97aea26bd8b103bf2df9fc
-
SSDEEP
24576:J6V6VC/AyqGizWCaFbyi/i328ab4F+rM/aXq6bJfBUam6:J6cbGizWCaFbN/i3da1YS6ozB
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-28_2380a8b5b1a8be837915fc532ca92346_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-28_2380a8b5b1a8be837915fc532ca92346_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.1MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.1MB