Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
19/05/2024, 20:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-05-19_bff6e9389402836b32acaa690fff674d_ryuk.exe
Resource
win7-20240215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-05-19_bff6e9389402836b32acaa690fff674d_ryuk.exe
Resource
win10v2004-20240508-en
0 signatures
150 seconds
General
-
Target
2024-05-19_bff6e9389402836b32acaa690fff674d_ryuk.exe
-
Size
1.4MB
-
MD5
bff6e9389402836b32acaa690fff674d
-
SHA1
e42714f6f9331d1b0358692c049dd3f69c803138
-
SHA256
34998062ce8cf3674ecafabc7cad3f8562faa28f90b2f254856f74e18319856b
-
SHA512
88ffebb43853d8bf27a3ddccb89d014405930b630e2b5e8fe9e4eff1019bb07e4db22b4ef873459164144d888f292d1d0cc2dec6f8392ef380573b7fb261d06c
-
SSDEEP
24576:giPnBsuEcsqjnhMgeiCl7G0nehbGZpbD:ZSu1Dmg27RnWGj
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 1804 2024-05-19_bff6e9389402836b32acaa690fff674d_ryuk.exe