Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-04-29...uk.exe

windows7-x64

1

2024-04-29...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-29_8b748f95ad812cf56a9f1f6a66cb11b4_ryuk

  • Size

    5.5MB

  • Sample

    240429-psnmysaf68

  • MD5

    8b748f95ad812cf56a9f1f6a66cb11b4

  • SHA1

    c20b966e8c8b1c236d5e998988c8501f6e6c4b7e

  • SHA256

    2d2c4a8b19cb62a34c890cf71816bb13c3d29f033edff12db205ec0a3b254c2d

  • SHA512

    c30efa73f93fcb75504ad4da6a616c246df8f104c6a89af44ad246cf9a5d4e683c2e35c7f93fb6811fb398149ec3e90861a546a5309e1433d7a9c0efb8b04ed5

  • SSDEEP

    49152:oEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfv:mAI5pAdVJn9tbnR1VgBVm9Db0

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-29_8b748f95ad812cf56a9f1f6a66cb11b4_ryuk

    • Size

      5.5MB

    • MD5

      8b748f95ad812cf56a9f1f6a66cb11b4

    • SHA1

      c20b966e8c8b1c236d5e998988c8501f6e6c4b7e

    • SHA256

      2d2c4a8b19cb62a34c890cf71816bb13c3d29f033edff12db205ec0a3b254c2d

    • SHA512

      c30efa73f93fcb75504ad4da6a616c246df8f104c6a89af44ad246cf9a5d4e683c2e35c7f93fb6811fb398149ec3e90861a546a5309e1433d7a9c0efb8b04ed5

    • SSDEEP

      49152:oEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfv:mAI5pAdVJn9tbnR1VgBVm9Db0

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks