Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-08-07...uk.exe

windows7-x64

1

2024-08-07...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-08-07_6746c63ee2eebbece4804049c7abbcf2_ryuk

  • Size

    1.5MB

  • Sample

    240807-ypvfrswgra

  • MD5

    6746c63ee2eebbece4804049c7abbcf2

  • SHA1

    a9883f3de4c41aa2b7f3310342a195642153d729

  • SHA256

    30272a85129992962333d3e558077da7f72f14593bcd979a8adabbeaa5874dfb

  • SHA512

    8a476a44e81561d1067a062a1fa013e47cdbdb44cb49bf56be43fabf7c97e51bb87e9b3dd352e17e9239e7b85ff5518734f44fc219070b964b227c94c2e50f99

  • SSDEEP

    24576:J3oH6mhNF4Xx7AmsqjnhMgeiCl7G0nehbGZpbD:5oHRFEBAqDmg27RnWGj

Score
7/10
persistenceprivilege_escalationspywarestealer

Malware Config

Targets

    • Target

      2024-08-07_6746c63ee2eebbece4804049c7abbcf2_ryuk

    • Size

      1.5MB

    • MD5

      6746c63ee2eebbece4804049c7abbcf2

    • SHA1

      a9883f3de4c41aa2b7f3310342a195642153d729

    • SHA256

      30272a85129992962333d3e558077da7f72f14593bcd979a8adabbeaa5874dfb

    • SHA512

      8a476a44e81561d1067a062a1fa013e47cdbdb44cb49bf56be43fabf7c97e51bb87e9b3dd352e17e9239e7b85ff5518734f44fc219070b964b227c94c2e50f99

    • SSDEEP

      24576:J3oH6mhNF4Xx7AmsqjnhMgeiCl7G0nehbGZpbD:5oHRFEBAqDmg27RnWGj

    Score
    7/10
    persistenceprivilege_escalationspywarestealer

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

      persistenceprivilege_escalation

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks