Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    0s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 19:33

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2024-05-20_5b401d2fe82b616f363db6d90f03bcdf_ryuk.exe command="C:\Users\Admin\AppData\Local\Temp\2024-05-20_5b401d2fe82b616f363db6d90f03bcdf_ryuk.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.

General

  • Target

    2024-05-20_5b401d2fe82b616f363db6d90f03bcdf_ryuk.exe

  • Size

    1.6MB

  • MD5

    5b401d2fe82b616f363db6d90f03bcdf

  • SHA1

    a379ed4cd5a9637ac5c3bd93d263deae82e2c2c3

  • SHA256

    37090abd7f1bef0968f8df61d4aff9ed6a8bd5c81a5771b22118c013714d7485

  • SHA512

    b44036079e901acf9fc17f390858ed64b06fb2035e53b7cb2d5285d9b7b87138c5fe70eeb8ac4c5ec7d7e09b62e771b0483a0d60f40b03c82ee3022e98115cfe

  • SSDEEP

    24576:YPxXh8qZZuu/utFy/e/HAuzlOpZeT3WYt2rR8FfBhRJUEbDk1ulUk:YBuq6eutM/6HAMl/t2r4PRSEk1ul

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-20_5b401d2fe82b616f363db6d90f03bcdf_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-20_5b401d2fe82b616f363db6d90f03bcdf_ryuk.exe"
    1⤵
      PID:2300

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2300-0-0x0000000140000000-0x00000001401B6000-memory.dmp

      Filesize

      1.7MB