Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-06-29_f018ea6988d8a36e6a1eeefe6a1f8e20_ryuk

  • Size

    4.6MB

  • Sample

    240629-x7mcfatgnd

  • MD5

    f018ea6988d8a36e6a1eeefe6a1f8e20

  • SHA1

    6d1786be242d610937d87b76dd4495882a1180da

  • SHA256

    b0926d8ef240f74d31b034fd8d7b013b25f0d07ad062d8091a68afd2c8889045

  • SHA512

    106b37132ed8331a119514547b696a1caa4023c3a73ff445c8e6085719889b18a486317a08890b9106e7bc61e54cbb8d0f2047a2bc43465af4fe2d5787b0e700

  • SSDEEP

    49152:RndPjazwYcCOlBWD9rqGHi0iIGTHI6DOnIIeNxu6xl1aZt6m5xbzDI6bpsRJrAG2:t2D8OiFIIm3Gob5iEK1u60i5A0+

Score
7/10

Malware Config

Targets

    • Target

      2024-06-29_f018ea6988d8a36e6a1eeefe6a1f8e20_ryuk

    • Size

      4.6MB

    • MD5

      f018ea6988d8a36e6a1eeefe6a1f8e20

    • SHA1

      6d1786be242d610937d87b76dd4495882a1180da

    • SHA256

      b0926d8ef240f74d31b034fd8d7b013b25f0d07ad062d8091a68afd2c8889045

    • SHA512

      106b37132ed8331a119514547b696a1caa4023c3a73ff445c8e6085719889b18a486317a08890b9106e7bc61e54cbb8d0f2047a2bc43465af4fe2d5787b0e700

    • SSDEEP

      49152:RndPjazwYcCOlBWD9rqGHi0iIGTHI6DOnIIeNxu6xl1aZt6m5xbzDI6bpsRJrAG2:t2D8OiFIIm3Gob5iEK1u60i5A0+

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks