Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
-
submitted
15/06/2024, 10:41
General
-
Target
2024-06-15_be96893234e9aa23559cb093d8d31ee0_cobalt-strike_ryuk.exe
-
Size
796KB
-
MD5
be96893234e9aa23559cb093d8d31ee0
-
SHA1
42555ef1bef8dffe090b31cbd0f09dad60539578
-
SHA256
57f1a5031665c12ffa0e09d5b18e0cd95c8c1b7c40be7b25ffcdfc8cc4360004
-
SHA512
4b249afbe4e7004193ee17a0298f31ff9ad3cddc66524c6534aba07c54d9a252011ada80b24c1a9cbbed3eae403e128d9e628db3748d714d82cfff6d062259f5
-
SSDEEP
12288:rXDCAZzP/w24lhcGt/sB1KcYmqgZvAMlUoUjG+YKtMfnkOeZb5JYiNAgAPh:aANw243Dt/sBlDqgZQd6XKtiMJYiPU
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-15_be96893234e9aa23559cb093d8d31ee0_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-15_be96893234e9aa23559cb093d8d31ee0_cobalt-strike_ryuk.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
828KB
-
Filesize
384KB
-
Filesize
828KB
-
Filesize
384KB