Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

2024-06-05...uk.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/06/2024, 16:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-06-05_d87471d09e92a4db1e424215426293cb_ryuk.exe

  • Size

    1.8MB

  • MD5

    d87471d09e92a4db1e424215426293cb

  • SHA1

    7115d922ba153d7a8034583b24545cb94f20011b

  • SHA256

    ff794402c1621bc09fe15d83f033edf970e7ec2d96bd33ef49818b10a117c62e

  • SHA512

    8eb8a5b20af6e9817dde7d1fbba4afdd2ffaf8e2f75d3204b6d601ad8519323bcf0c6790d39ce88e7be3fa3b85887320e96a81de4acb8069bd6d7a6a67ddd2d1

  • SSDEEP

    24576:BJmzkJLdEyIewmlEy1mlWAm7Q6Oxdwx+KQj0H9n+UOoTqy8QCYrLLeYKUML:jmzkJLnKm313nOxr0o/ouy8grLLesK

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-05_d87471d09e92a4db1e424215426293cb_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-05_d87471d09e92a4db1e424215426293cb_ryuk.exe"
    1⤵
      PID:3088

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3088-1-0x00000000020B0000-0x0000000002110000-memory.dmp

      Filesize

      384KB

      Download

    • memory/3088-7-0x00000000020B0000-0x0000000002110000-memory.dmp

      Filesize

      384KB

      Download

    • memory/3088-11-0x00000000020B0000-0x0000000002110000-memory.dmp

      Filesize

      384KB

      Download

    • memory/3088-0-0x0000000140000000-0x00000001401DB000-memory.dmp

      Filesize

      1.9MB

      Download

    • memory/3088-12-0x0000000140000000-0x00000001401DB000-memory.dmp

      Filesize

      1.9MB

      Download