Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-09-09_2e2b567671fb86b7e5ebc9a1d0c47f60_cobalt-strike_ryuk

  • Size

    5.3MB

  • Sample

    240909-vy8g7sseka

  • MD5

    2e2b567671fb86b7e5ebc9a1d0c47f60

  • SHA1

    38eb04703704a6ad50168984c22c386594ce63b3

  • SHA256

    1c3eabc20fcbbc87a7ebf0509c21ca67169453894ee059570cf4465634296ff1

  • SHA512

    ea0df4d0dbaf0e67972128f1b6dc6a9be4e85c307aaeb28bb2b0daa39639ef0d6614982efd171e9003aa7e163a993d41d06b7ae84019979cf7430350c394c3fc

  • SSDEEP

    98304:zLXClnwPWrDSkYg5MHKO6HCD2zo47wRGpj3:ClnwPiQg+12zokF9

Malware Config

Targets

    • Target

      2024-09-09_2e2b567671fb86b7e5ebc9a1d0c47f60_cobalt-strike_ryuk

    • Size

      5.3MB

    • MD5

      2e2b567671fb86b7e5ebc9a1d0c47f60

    • SHA1

      38eb04703704a6ad50168984c22c386594ce63b3

    • SHA256

      1c3eabc20fcbbc87a7ebf0509c21ca67169453894ee059570cf4465634296ff1

    • SHA512

      ea0df4d0dbaf0e67972128f1b6dc6a9be4e85c307aaeb28bb2b0daa39639ef0d6614982efd171e9003aa7e163a993d41d06b7ae84019979cf7430350c394c3fc

    • SSDEEP

      98304:zLXClnwPWrDSkYg5MHKO6HCD2zo47wRGpj3:ClnwPiQg+12zokF9

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks