Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-05-24...uk.exe

windows7-x64

1

2024-05-24...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-24_9842b88c6c61b7c29c55277e9a91d19f_ryuk

  • Size

    5.5MB

  • Sample

    240524-3samzsff34

  • MD5

    9842b88c6c61b7c29c55277e9a91d19f

  • SHA1

    6c6a1527f1b32068ade13b96a2941c40bd3de911

  • SHA256

    ea163e77f5e7dc501f87fa0a7c02606a33a844235e4198e2151f4d41d8fda6e8

  • SHA512

    94643a6b7174fbe5713a64b887969592c22a8f1ec8eb07ab070ed03bca782710cd3b16c31f0441375eae40df6b473f8cd3c0939efd4c553805c289c3556811e3

  • SSDEEP

    49152:gEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfv:uAI5pAdVJn9tbnR1VgBVmwTjYvH

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-05-24_9842b88c6c61b7c29c55277e9a91d19f_ryuk

    • Size

      5.5MB

    • MD5

      9842b88c6c61b7c29c55277e9a91d19f

    • SHA1

      6c6a1527f1b32068ade13b96a2941c40bd3de911

    • SHA256

      ea163e77f5e7dc501f87fa0a7c02606a33a844235e4198e2151f4d41d8fda6e8

    • SHA512

      94643a6b7174fbe5713a64b887969592c22a8f1ec8eb07ab070ed03bca782710cd3b16c31f0441375eae40df6b473f8cd3c0939efd4c553805c289c3556811e3

    • SSDEEP

      49152:gEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfv:uAI5pAdVJn9tbnR1VgBVmwTjYvH

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks