Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-09-15_8811c4e1059f777427499d52e475bddb_ryuk
-
Size
3.0MB
-
Sample
240915-a7k32swhml
-
MD5
8811c4e1059f777427499d52e475bddb
-
SHA1
3a5d39a67f46afbb7642868f52cb98be0c467ac0
-
SHA256
31b4c9317ee5f1d80b2e9ed56798d735311944d78ae26e33b527388b460c2e68
-
SHA512
792f74d016b3ceef9bef0bb6ab607fdf22c5b55c5b3953f87168402beafd8b94bd60e1ca5ac990c0e0a86c76699f8a5d40b7393693c468150954e4bc52867338
-
SSDEEP
98304:Kj0zPu9LbmxCb6ib4WraIox9XcQiNE6ZHopCFeUg:KjpBBWIox9XcAqHUCDg
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-15_8811c4e1059f777427499d52e475bddb_ryuk.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-15_8811c4e1059f777427499d52e475bddb_ryuk.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
2024-09-15_8811c4e1059f777427499d52e475bddb_ryuk
-
Size
3.0MB
-
MD5
8811c4e1059f777427499d52e475bddb
-
SHA1
3a5d39a67f46afbb7642868f52cb98be0c467ac0
-
SHA256
31b4c9317ee5f1d80b2e9ed56798d735311944d78ae26e33b527388b460c2e68
-
SHA512
792f74d016b3ceef9bef0bb6ab607fdf22c5b55c5b3953f87168402beafd8b94bd60e1ca5ac990c0e0a86c76699f8a5d40b7393693c468150954e4bc52867338
-
SSDEEP
98304:Kj0zPu9LbmxCb6ib4WraIox9XcQiNE6ZHopCFeUg:KjpBBWIox9XcAqHUCDg
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-