Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
28/07/2024, 00:44
Static task
static1
Behavioral task
behavioral1
Sample
2024-07-28_05d7d6f324d60b647029885f8291c08b_ryuk.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-07-28_05d7d6f324d60b647029885f8291c08b_ryuk.exe
Resource
win10v2004-20240709-en
General
-
Target
2024-07-28_05d7d6f324d60b647029885f8291c08b_ryuk.exe
-
Size
148KB
-
MD5
05d7d6f324d60b647029885f8291c08b
-
SHA1
53543fff71cb49413acb74741fec8c532b6a945b
-
SHA256
aa89c8139d7e60d4008f20593d878ff78243901fc136a2b8904de2b236daa592
-
SHA512
909545b7d087728ab9535572877252ddda5695c46290ba236e420054bf05a1d35e25faca8f0535b2b3f569a0ec6e785a30ec196f1b869c127b4a6dc0b9de02e9
-
SSDEEP
3072:GnSWGHw2kkye/g8o2ecQvvLjr5SpSgrkevt6L3it/HA:GP2wu5oL7vz9VevwjOI
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4660 2024-07-28_05d7d6f324d60b647029885f8291c08b_ryuk.exe 4660 2024-07-28_05d7d6f324d60b647029885f8291c08b_ryuk.exe