Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
29/05/2024, 19:12
General
-
Target
2024-05-29_8ca5f1d9c3fdf3d4c6b9e650e2efdf80_cobalt-strike_ryuk.exe
-
Size
796KB
-
MD5
8ca5f1d9c3fdf3d4c6b9e650e2efdf80
-
SHA1
1d95e9ce7333366672024adaf17f72d80815f248
-
SHA256
a77f4cda4017131babebb15a6feab345570d270abe8b617ff0e62fe9da89edbf
-
SHA512
5bc9cec4f0cfd1cb4de48ca54d79e7c373dd78f85cdf533133f8b198d940222395d5ecaec86df149ca02c9f85f7dbe043c4883e8377df74e8a4119bfdd831bf0
-
SSDEEP
24576:8ANw243S8NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:8ew2JgDUYmvFur31yAipQCtXxc0H
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-29_8ca5f1d9c3fdf3d4c6b9e650e2efdf80_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-29_8ca5f1d9c3fdf3d4c6b9e650e2efdf80_cobalt-strike_ryuk.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
828KB
-
Filesize
384KB
-
Filesize
828KB