Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-09-19_cab0abb57bab8b5f4be100762df18463_ryuk

  • Size

    1.1MB

  • Sample

    240919-epqm2azgjg

  • MD5

    cab0abb57bab8b5f4be100762df18463

  • SHA1

    bf76275ae43513be81d6ee0fad5e1875fce20f30

  • SHA256

    06b2a0c6fb78e93accb706126cfecb227e5fcbace09de89204f0e1b6ed00da02

  • SHA512

    de05ac0ed4b71c76030996429debb7767adea9c991957a39df4aa4f42bd11a62d3b1bc9c5a756857506346a676875c015b904efa560d3bbb0a932b96a75022f5

  • SSDEEP

    24576:ASi1SoCU5qJSr1eWPSCsP0MugC6eThSkQ/7Gb8NLEbeZ:wS7PLjeT0kQ/qoLEw

Malware Config

Targets

    • Target

      2024-09-19_cab0abb57bab8b5f4be100762df18463_ryuk

    • Size

      1.1MB

    • MD5

      cab0abb57bab8b5f4be100762df18463

    • SHA1

      bf76275ae43513be81d6ee0fad5e1875fce20f30

    • SHA256

      06b2a0c6fb78e93accb706126cfecb227e5fcbace09de89204f0e1b6ed00da02

    • SHA512

      de05ac0ed4b71c76030996429debb7767adea9c991957a39df4aa4f42bd11a62d3b1bc9c5a756857506346a676875c015b904efa560d3bbb0a932b96a75022f5

    • SSDEEP

      24576:ASi1SoCU5qJSr1eWPSCsP0MugC6eThSkQ/7Gb8NLEbeZ:wS7PLjeT0kQ/qoLEw

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks