Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-06-06_b9e9480d98c66d5dc6ab961ecd984d46_ryuk

  • Size

    5.5MB

  • Sample

    240606-w48wlaaa2z

  • MD5

    b9e9480d98c66d5dc6ab961ecd984d46

  • SHA1

    e2f55ce879c64ca62d1e3a2a76ac3adc72c0372a

  • SHA256

    cc4c406691a72c055f2caf8d55ed3171b8d53745f04ef3b05ca02adccd0ab02c

  • SHA512

    be3cd9dcc30cf2cb733f717a3344fbe0b3355af9dd4dec0fd8ec54422c43b7d0f0fe98c3a06fde1f2b1e1a6f5f1637b339047775ec030d17d274a41f1f5a757d

  • SSDEEP

    49152:OEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfe:UAI5pAdVJn9tbnR1VgBVmZUtq

Score
7/10

Malware Config

Targets

    • Target

      2024-06-06_b9e9480d98c66d5dc6ab961ecd984d46_ryuk

    • Size

      5.5MB

    • MD5

      b9e9480d98c66d5dc6ab961ecd984d46

    • SHA1

      e2f55ce879c64ca62d1e3a2a76ac3adc72c0372a

    • SHA256

      cc4c406691a72c055f2caf8d55ed3171b8d53745f04ef3b05ca02adccd0ab02c

    • SHA512

      be3cd9dcc30cf2cb733f717a3344fbe0b3355af9dd4dec0fd8ec54422c43b7d0f0fe98c3a06fde1f2b1e1a6f5f1637b339047775ec030d17d274a41f1f5a757d

    • SSDEEP

      49152:OEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfe:UAI5pAdVJn9tbnR1VgBVmZUtq

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks