Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-05-29...uk.exe

windows7-x64

7

2024-05-29...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-29_d80b31adb3afafb3ea37c0fcec9cdd2f_ryuk

  • Size

    1.1MB

  • Sample

    240529-2v9dnada2w

  • MD5

    d80b31adb3afafb3ea37c0fcec9cdd2f

  • SHA1

    aa61e2ff504f24cd26211afbf4c7a651ae377565

  • SHA256

    efc2d067cd9e2464db4cda9b055f2b786e25b64967eca89fd3a1f9d8fbc43cb7

  • SHA512

    5b7c03dd52a14b2a3ca1fca7f3e91705f71f143be9c7f90e483fa7be69275fc834f0cbe44190682410e6eb398381df8b71081a54004d8639094e847e25cc808e

  • SSDEEP

    24576:DSi1SoCU5qJSr1eWPSCsP0MugC6eTu8NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:TS7PLjeTugDUYmvFur31yAipQCtXxc0H

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-05-29_d80b31adb3afafb3ea37c0fcec9cdd2f_ryuk

    • Size

      1.1MB

    • MD5

      d80b31adb3afafb3ea37c0fcec9cdd2f

    • SHA1

      aa61e2ff504f24cd26211afbf4c7a651ae377565

    • SHA256

      efc2d067cd9e2464db4cda9b055f2b786e25b64967eca89fd3a1f9d8fbc43cb7

    • SHA512

      5b7c03dd52a14b2a3ca1fca7f3e91705f71f143be9c7f90e483fa7be69275fc834f0cbe44190682410e6eb398381df8b71081a54004d8639094e847e25cc808e

    • SSDEEP

      24576:DSi1SoCU5qJSr1eWPSCsP0MugC6eTu8NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:TS7PLjeTugDUYmvFur31yAipQCtXxc0H

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks