Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-07-04...uk.exe

windows7-x64

1

2024-07-04...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-07-04_299a7a920e7887c576dc72ce5bc3f24f_ryuk

  • Size

    940KB

  • Sample

    240704-lftfwstgrr

  • MD5

    299a7a920e7887c576dc72ce5bc3f24f

  • SHA1

    677ba47172ae37c78763314f84ff1517dafc6c2a

  • SHA256

    30f4363538db5730f430c4eefb0bce69f5ee8a155fe42673b7bc8968fa232270

  • SHA512

    a9cdc4b4e74b0680563b9f90ab27767c5fcdee3f5210498195ce4f3f887bc91b5932fb54bd3028189cc6c785886cb64ee3dd0e329a6de29b6fbf47c450bca5e4

  • SSDEEP

    12288:WOb9A4LWOsvAYFTwGt/sB1KcYmqgZvAMlUoUjG+YKtMfnkOeZb5JYiNAgAPh:/pL3UT3t/sBlDqgZQd6XKtiMJYiPU

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-07-04_299a7a920e7887c576dc72ce5bc3f24f_ryuk

    • Size

      940KB

    • MD5

      299a7a920e7887c576dc72ce5bc3f24f

    • SHA1

      677ba47172ae37c78763314f84ff1517dafc6c2a

    • SHA256

      30f4363538db5730f430c4eefb0bce69f5ee8a155fe42673b7bc8968fa232270

    • SHA512

      a9cdc4b4e74b0680563b9f90ab27767c5fcdee3f5210498195ce4f3f887bc91b5932fb54bd3028189cc6c785886cb64ee3dd0e329a6de29b6fbf47c450bca5e4

    • SSDEEP

      12288:WOb9A4LWOsvAYFTwGt/sB1KcYmqgZvAMlUoUjG+YKtMfnkOeZb5JYiNAgAPh:/pL3UT3t/sBlDqgZQd6XKtiMJYiPU

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks