Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-06-29_f6370852fb32bf69cfe1c03fc0876222_ryuk

  • Size

    5.5MB

  • Sample

    240629-rxx4assell

  • MD5

    f6370852fb32bf69cfe1c03fc0876222

  • SHA1

    1a634d6230bc539a37ec80bb137290a42b60abbd

  • SHA256

    3d378f10f319596d716a05b2dd00cfe278baf8fb1c66d110d762bb775a72e951

  • SHA512

    99c17e7afa3a86159591fdeb73fd66626e5d42e1e2a15872512c946dc8dc456a6df2c30e177d914628e505502307e5fcd7c50058fed36f5461d9831e087f3efb

  • SSDEEP

    98304:cAI5pAdVJn9tbnR1VgBVmXHFdi4VEk0V:cAsCh7XYuLiJk0

Score
7/10

Malware Config

Targets

    • Target

      2024-06-29_f6370852fb32bf69cfe1c03fc0876222_ryuk

    • Size

      5.5MB

    • MD5

      f6370852fb32bf69cfe1c03fc0876222

    • SHA1

      1a634d6230bc539a37ec80bb137290a42b60abbd

    • SHA256

      3d378f10f319596d716a05b2dd00cfe278baf8fb1c66d110d762bb775a72e951

    • SHA512

      99c17e7afa3a86159591fdeb73fd66626e5d42e1e2a15872512c946dc8dc456a6df2c30e177d914628e505502307e5fcd7c50058fed36f5461d9831e087f3efb

    • SSDEEP

      98304:cAI5pAdVJn9tbnR1VgBVmXHFdi4VEk0V:cAsCh7XYuLiJk0

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks