Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-28_2eeab99a611f5495f89f69d2eddebce1_ryuk

  • Size

    5.5MB

  • Sample

    240528-vdwb5sde38

  • MD5

    2eeab99a611f5495f89f69d2eddebce1

  • SHA1

    553ce3052a6a467963cdd24d96e407149fff214d

  • SHA256

    641115b3047da055bf6aa4c5306c01d9ea3694e41ea5a1010a19c51b3a47915e

  • SHA512

    ad007cfd26164b121b7f81fb7dfc4433422c575e4ccf301a880fb8bdaa7edcf13ed7448e266ca93b54bd5daa58058d06786a1dcba6248439ee031e0aab4d41a9

  • SSDEEP

    98304:lAI5pAdVJn9tbnR1VgBVmBNEex+u5Ck9:lAsCh7XYONX+uf

Score
7/10

Malware Config

Targets

    • Target

      2024-05-28_2eeab99a611f5495f89f69d2eddebce1_ryuk

    • Size

      5.5MB

    • MD5

      2eeab99a611f5495f89f69d2eddebce1

    • SHA1

      553ce3052a6a467963cdd24d96e407149fff214d

    • SHA256

      641115b3047da055bf6aa4c5306c01d9ea3694e41ea5a1010a19c51b3a47915e

    • SHA512

      ad007cfd26164b121b7f81fb7dfc4433422c575e4ccf301a880fb8bdaa7edcf13ed7448e266ca93b54bd5daa58058d06786a1dcba6248439ee031e0aab4d41a9

    • SSDEEP

      98304:lAI5pAdVJn9tbnR1VgBVmBNEex+u5Ck9:lAsCh7XYONX+uf

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks