Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
07/06/2024, 20:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-06-07_c5c11313f0252b13dc0117a46630e8a0_ryuk.exe
Resource
win10v2004-20240426-en
1 signatures
150 seconds
General
-
Target
2024-06-07_c5c11313f0252b13dc0117a46630e8a0_ryuk.exe
-
Size
1.8MB
-
MD5
c5c11313f0252b13dc0117a46630e8a0
-
SHA1
e799cf1a7a3d10d91ed5f510285b420ac286ecdd
-
SHA256
946cde2578bf56897a6de78a1d381f3704bae0fd386a7338867dff6aad453fac
-
SHA512
568a02421f1430176415a0f53dfacd283e1a109fc7271b37d35fffd7369e433e9dcef2e5f423f9dc66edb7ed58b71a788de6c88bd6603da044dd9c5f9c772615
-
SSDEEP
49152:7mzkJLnKm313nOxr0GRVlbnXf9gPTTW7H1GXC:7Cksi13WRVlbnP9WXW7H6C
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 4836 2024-06-07_c5c11313f0252b13dc0117a46630e8a0_ryuk.exe