Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
-
submitted
24/06/2024, 16:55
General
-
Target
2024-06-24_8270141ae64b961d13bb4c4418e913f7_ryuk.exe
-
Size
1.8MB
-
MD5
8270141ae64b961d13bb4c4418e913f7
-
SHA1
6d88f710c0cd1ac2e24951bbe7f1af78b8c6e4c4
-
SHA256
875897f5ac21070c8c21521cdff7a5b73683783346512fbf0b6242f04c41e864
-
SHA512
c4192512864cdd8476620e411f3d0d7acaa66cb545970c19ebb9885d69198da117dd3b378aad972c5483bdc9c32502b69ca5d10cec1b1be2d7a6e4ca3a8313f6
-
SSDEEP
24576:oKjdRz0DzOswhCw45fCpmALmQjdjIucF93i0MxSkQ/7Gb8NLEbeZ:oKX0DzOswXkfymHQlIuQ/kQ/qoLEw
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-24_8270141ae64b961d13bb4c4418e913f7_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-24_8270141ae64b961d13bb4c4418e913f7_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.9MB
-
Filesize
1.9MB