Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
-
submitted
02/06/2024, 21:13
General
-
Target
2024-06-02_e9a81052aef810149f298674fb38ac30_cobalt-strike_ryuk.exe
-
Size
796KB
-
MD5
e9a81052aef810149f298674fb38ac30
-
SHA1
694ce70ee8ae3e108c2d13f5f15076ed2f5f6048
-
SHA256
af8bf33d9b76a7e070e66107b81fbd782bacc466e95ed3278261d7ef6931ef76
-
SHA512
afb320b4eb3b451e4773144594f9d5ca0a4d5f859fa7614991fe586793041ec60368a322d6ad79d9dfc172a87e4dc21152e09d08436e80b8702c40dc51755012
-
SSDEEP
12288:LXDCAZzP/w24lhwGt/sB1KcYmqgZvAMlUoUjG+YKtMfnkOeZb5JYiNAgAPh:6ANw2433t/sBlDqgZQd6XKtiMJYiPU
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-02_e9a81052aef810149f298674fb38ac30_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-02_e9a81052aef810149f298674fb38ac30_cobalt-strike_ryuk.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
828KB
-
Filesize
384KB
-
Filesize
828KB
-
Filesize
384KB