Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-04-29...uk.exe

windows7-x64

1

2024-04-29...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-29_73273f01e4faca50aa8cf2f3d5faa22b_ryuk

  • Size

    5.5MB

  • Sample

    240429-pa8v6saa66

  • MD5

    73273f01e4faca50aa8cf2f3d5faa22b

  • SHA1

    35a91458ad29ac0f5611cfb49c7625e13e2a1ae3

  • SHA256

    c3f77b8bb9eff67df3e2e4bcc74a6324993a85d324f7f97fcfb5dd2aa607093e

  • SHA512

    eff0544395d7dca1c6d52bb0949c033524b8bc6af88c63fc79972c9e612468f3c9ce6a60a84d0e0ffbbc3aba00ce55c3993a222c7c8d174f759b465988da9e67

  • SSDEEP

    49152:kEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfz:CAI5pAdVJn9tbnR1VgBVmI8

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-29_73273f01e4faca50aa8cf2f3d5faa22b_ryuk

    • Size

      5.5MB

    • MD5

      73273f01e4faca50aa8cf2f3d5faa22b

    • SHA1

      35a91458ad29ac0f5611cfb49c7625e13e2a1ae3

    • SHA256

      c3f77b8bb9eff67df3e2e4bcc74a6324993a85d324f7f97fcfb5dd2aa607093e

    • SHA512

      eff0544395d7dca1c6d52bb0949c033524b8bc6af88c63fc79972c9e612468f3c9ce6a60a84d0e0ffbbc3aba00ce55c3993a222c7c8d174f759b465988da9e67

    • SSDEEP

      49152:kEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfz:CAI5pAdVJn9tbnR1VgBVmI8

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks