Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-07-07_c6ec2a6423afafb0107e88639236c38b_ryuk

  • Size

    4.6MB

  • Sample

    240707-czay8atdrf

  • MD5

    c6ec2a6423afafb0107e88639236c38b

  • SHA1

    2ae7a833b98f84b9c4465a127f4f6bdb70a2ab58

  • SHA256

    50534930cd274ceddd0856cc721d0783814d1fc1bae3c03680a228e6a95d049f

  • SHA512

    aee69d0128da175a233b9ea3dbcfcb539a2855fa11e28f0dd19e42c760f5ccbf09b4e2e24c31a140ab2f51d3055c41c2a37e5a73c77b65796136a4101c0994e0

  • SSDEEP

    49152:3vuURFfSjB2ZAKQKIFihKwDOhIYz9RtHBDWeTg8iqSkwER4a1HecEPLXhzuo9AHV:/SDiKwyhx4BER3ALkaA

Malware Config

Targets

    • Target

      2024-07-07_c6ec2a6423afafb0107e88639236c38b_ryuk

    • Size

      4.6MB

    • MD5

      c6ec2a6423afafb0107e88639236c38b

    • SHA1

      2ae7a833b98f84b9c4465a127f4f6bdb70a2ab58

    • SHA256

      50534930cd274ceddd0856cc721d0783814d1fc1bae3c03680a228e6a95d049f

    • SHA512

      aee69d0128da175a233b9ea3dbcfcb539a2855fa11e28f0dd19e42c760f5ccbf09b4e2e24c31a140ab2f51d3055c41c2a37e5a73c77b65796136a4101c0994e0

    • SSDEEP

      49152:3vuURFfSjB2ZAKQKIFihKwDOhIYz9RtHBDWeTg8iqSkwER4a1HecEPLXhzuo9AHV:/SDiKwyhx4BER3ALkaA

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks