Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

2024-06-08...uk.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-08_2fee48b9147885376a832ea376cfbc5e_ryuk

  • Size

    4.6MB

  • Sample

    240608-dqyvcsha59

  • MD5

    2fee48b9147885376a832ea376cfbc5e

  • SHA1

    4b6b5188137421f6c5d4fb45405e685e8ad603e3

  • SHA256

    3ba114ba534c457a5c99fa9b50014c8946a779b1468366b8d6046d4c5f8d6cb8

  • SHA512

    d05b183d061ed0f2d17648445e9c36dcd38fb82eea6043a46a2b6cf5dca2bc4e54b24ebacad3b40d1c898bdbb471b35b867d378f05a77857004cec2f64a3b07a

  • SSDEEP

    49152:8ndPjazwYcCOlBWD9rqGZi0iIGTHI6DOnIIeNxu6xl1aZt6m5xbzDI6bpsRJrAGk:W2D8siFIIm3Gob5iEwU7dG1yfpVBlH

Score
9/10
spywarestealer

Malware Config

Targets

    • Target

      2024-06-08_2fee48b9147885376a832ea376cfbc5e_ryuk

    • Size

      4.6MB

    • MD5

      2fee48b9147885376a832ea376cfbc5e

    • SHA1

      4b6b5188137421f6c5d4fb45405e685e8ad603e3

    • SHA256

      3ba114ba534c457a5c99fa9b50014c8946a779b1468366b8d6046d4c5f8d6cb8

    • SHA512

      d05b183d061ed0f2d17648445e9c36dcd38fb82eea6043a46a2b6cf5dca2bc4e54b24ebacad3b40d1c898bdbb471b35b867d378f05a77857004cec2f64a3b07a

    • SSDEEP

      49152:8ndPjazwYcCOlBWD9rqGZi0iIGTHI6DOnIIeNxu6xl1aZt6m5xbzDI6bpsRJrAGk:W2D8siFIIm3Gob5iEwU7dG1yfpVBlH

    Score
    9/10
    spywarestealer

    • Detects executables containing bas64 encoded gzip files

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks