Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-29_8b748f95ad812cf56a9f1f6a66cb11b4_ryuk

  • Size

    5.5MB

  • Sample

    240429-psnmysaf68

  • MD5

    8b748f95ad812cf56a9f1f6a66cb11b4

  • SHA1

    c20b966e8c8b1c236d5e998988c8501f6e6c4b7e

  • SHA256

    2d2c4a8b19cb62a34c890cf71816bb13c3d29f033edff12db205ec0a3b254c2d

  • SHA512

    c30efa73f93fcb75504ad4da6a616c246df8f104c6a89af44ad246cf9a5d4e683c2e35c7f93fb6811fb398149ec3e90861a546a5309e1433d7a9c0efb8b04ed5

  • SSDEEP

    49152:oEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfv:mAI5pAdVJn9tbnR1VgBVm9Db0

Score
7/10

Malware Config

Targets

    • Target

      2024-04-29_8b748f95ad812cf56a9f1f6a66cb11b4_ryuk

    • Size

      5.5MB

    • MD5

      8b748f95ad812cf56a9f1f6a66cb11b4

    • SHA1

      c20b966e8c8b1c236d5e998988c8501f6e6c4b7e

    • SHA256

      2d2c4a8b19cb62a34c890cf71816bb13c3d29f033edff12db205ec0a3b254c2d

    • SHA512

      c30efa73f93fcb75504ad4da6a616c246df8f104c6a89af44ad246cf9a5d4e683c2e35c7f93fb6811fb398149ec3e90861a546a5309e1433d7a9c0efb8b04ed5

    • SSDEEP

      49152:oEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfv:mAI5pAdVJn9tbnR1VgBVm9Db0

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks