Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-30_4d1bdb25611acd73840bcbfe68d01156_ryuk

  • Size

    2.2MB

  • Sample

    240430-t42q6scg88

  • MD5

    4d1bdb25611acd73840bcbfe68d01156

  • SHA1

    761cb6b65c15331a030aa8437a8b1c10a11ddd30

  • SHA256

    2a5de8bda7b5e28d83f0063d02ab5f4d59aeace31134134a64de420ee68fe096

  • SHA512

    b67a383a616ddf85d019b74815da391acb042a53a0def5499d6134fc64126e35c11b76115ecc50e7a9b4489485296d0c57e322f764783245e4c195876dce6da4

  • SSDEEP

    49152:fOOh3aN4kuLbegmtG070jIpM3kiSBM29mhNq:3U4ku/ct170uMhSBrkNq

Score
7/10

Malware Config

Targets

    • Target

      2024-04-30_4d1bdb25611acd73840bcbfe68d01156_ryuk

    • Size

      2.2MB

    • MD5

      4d1bdb25611acd73840bcbfe68d01156

    • SHA1

      761cb6b65c15331a030aa8437a8b1c10a11ddd30

    • SHA256

      2a5de8bda7b5e28d83f0063d02ab5f4d59aeace31134134a64de420ee68fe096

    • SHA512

      b67a383a616ddf85d019b74815da391acb042a53a0def5499d6134fc64126e35c11b76115ecc50e7a9b4489485296d0c57e322f764783245e4c195876dce6da4

    • SSDEEP

      49152:fOOh3aN4kuLbegmtG070jIpM3kiSBM29mhNq:3U4ku/ct170uMhSBrkNq

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks