Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
95s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
-
submitted
05/07/2024, 21:50
General
-
Target
2024-07-05_0b16b249fecfaef91b8930eed493e6e7_ryuk.exe
-
Size
1.8MB
-
MD5
0b16b249fecfaef91b8930eed493e6e7
-
SHA1
f6c854ad3510aa1a0b0a58056317f5a9bb472840
-
SHA256
41f08bc864218e19175ef40e89d5b3447ac1c0eef2997d7acf096abd6fe0951e
-
SHA512
91d865046ab9b3a23a9bffe7f4ef0c2c42c11a69a4d5618fc50b169104bd9769f4e13d0c467f0419b2214df5e5b36a6f210432963126bb47fd6e906b6870a65b
-
SSDEEP
24576:TJmzkJLdEyIewmlEy1mlWAm7Q6Oxdwx+KQj0H9nW/i328ab4F+rM/aXq6bJfBUaB:VmzkJLnKm313nOxr0E/i3da1YS6ozB
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-07-05_0b16b249fecfaef91b8930eed493e6e7_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-07-05_0b16b249fecfaef91b8930eed493e6e7_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.9MB
-
Filesize
1.9MB