Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
-
submitted
25/06/2024, 14:25
General
-
Target
2024-06-25_017b7aa1cbcfc16a59a0b2cae5eca23b_ryuk.exe
-
Size
1.5MB
-
MD5
017b7aa1cbcfc16a59a0b2cae5eca23b
-
SHA1
3cd4daa29dd5a213405d862bcadb0dc854aea740
-
SHA256
03ce0c295e5e5bd84317dab8011cc6dbc6d448e977ff19c618189b7df1fd1f57
-
SHA512
e283a8c10c121752ee2b5bbfa4a020afe0887c44b583f12b148d256f3d3f68865542d35fc8fdc9f9516f4192dfb2394817da5191fc3e05ac49ecb72b3ab736f1
-
SSDEEP
24576:i/sgEgxwEsYLsqjnhMgeiCl7G0nehbGZpbD:Ss+CEsgDmg27RnWGj
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-25_017b7aa1cbcfc16a59a0b2cae5eca23b_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-25_017b7aa1cbcfc16a59a0b2cae5eca23b_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
384KB