Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-06-20...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-20_e4a6f54cc1a59929353452324b8ce997_ryuk

  • Size

    4.6MB

  • Sample

    240620-rlmhes1hrh

  • MD5

    e4a6f54cc1a59929353452324b8ce997

  • SHA1

    8e66bd8e6aa2a20a28ff9b7fc37a5dfd0dba226e

  • SHA256

    e5592a74ea5f520055dc05a0935f080519c1ef011585f8d26fe30da0cd6c71b8

  • SHA512

    36956334016632a0f41f18eb3b244bfd95bc84db2f74de79d801c8b0e9b7551b9a03a458f286a954d15c21f4871bba5bc047ad2d18d4080d7cae3a641478c58b

  • SSDEEP

    49152:rndPjazwYcCOlBWD9rqGfi0iIGTHI6DOnIIeNxu6xl1aZt6m5xbzDI6bpsRJrAG3:T2D86iFIIm3Gob5iED3R83Jd/IZ2v

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-06-20_e4a6f54cc1a59929353452324b8ce997_ryuk

    • Size

      4.6MB

    • MD5

      e4a6f54cc1a59929353452324b8ce997

    • SHA1

      8e66bd8e6aa2a20a28ff9b7fc37a5dfd0dba226e

    • SHA256

      e5592a74ea5f520055dc05a0935f080519c1ef011585f8d26fe30da0cd6c71b8

    • SHA512

      36956334016632a0f41f18eb3b244bfd95bc84db2f74de79d801c8b0e9b7551b9a03a458f286a954d15c21f4871bba5bc047ad2d18d4080d7cae3a641478c58b

    • SSDEEP

      49152:rndPjazwYcCOlBWD9rqGfi0iIGTHI6DOnIIeNxu6xl1aZt6m5xbzDI6bpsRJrAG3:T2D86iFIIm3Gob5iED3R83Jd/IZ2v

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks