Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-06-02...uk.exe

windows7-x64

1

2024-06-02...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-02_b3b8ebfa796fdb607214a016154f1e1c_ryuk

  • Size

    5.5MB

  • Sample

    240602-19d1maha9y

  • MD5

    b3b8ebfa796fdb607214a016154f1e1c

  • SHA1

    bc902e28274934ef299a055d8088015f1252dd08

  • SHA256

    aa5ca01a4cdc71c10b1045e2b955b0308f61edb713800b62dc9016c7b29c6d14

  • SHA512

    0a057288e58a74c900447b2e0d150728688cffb325e3d7ef9cd42b7189d00a5378611be1fd51dfca1ab8b2ad8186e6ee63c98e41405e7b1e8fe05ffd040a51e3

  • SSDEEP

    49152:BEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfZ:lAI5pAdVJn9tbnR1VgBVmww7izY0a

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-06-02_b3b8ebfa796fdb607214a016154f1e1c_ryuk

    • Size

      5.5MB

    • MD5

      b3b8ebfa796fdb607214a016154f1e1c

    • SHA1

      bc902e28274934ef299a055d8088015f1252dd08

    • SHA256

      aa5ca01a4cdc71c10b1045e2b955b0308f61edb713800b62dc9016c7b29c6d14

    • SHA512

      0a057288e58a74c900447b2e0d150728688cffb325e3d7ef9cd42b7189d00a5378611be1fd51dfca1ab8b2ad8186e6ee63c98e41405e7b1e8fe05ffd040a51e3

    • SSDEEP

      49152:BEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfZ:lAI5pAdVJn9tbnR1VgBVmww7izY0a

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks