Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-10-12...uk.exe

windows7-x64

7

2024-10-12...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-12_3e6ae68ee52c0801c6d82fd71d2e709c_cobalt-strike_ryuk

  • Size

    1.8MB

  • Sample

    241012-q6a5fstdqh

  • MD5

    3e6ae68ee52c0801c6d82fd71d2e709c

  • SHA1

    0f83954ef561f89ef6864ae0f490bea9fc09e10c

  • SHA256

    f4711a5ad18275cf2c6b121510a585bd904411db896d0eef8f40a097f4b9081c

  • SHA512

    731d953c2d45ca6844c4f5034459e9cdba250dc6b6450b80f931f5efee5b8356499bbf1e05f0989589f59f658d643ee4bf775befceb187f3c595f96fcc0da56e

  • SSDEEP

    49152:OKfuPS3ELNjV7uZxEfOfOgwf0+xl6G6kC3Sg:Zm9qZxwgXkC7

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      2024-10-12_3e6ae68ee52c0801c6d82fd71d2e709c_cobalt-strike_ryuk

    • Size

      1.8MB

    • MD5

      3e6ae68ee52c0801c6d82fd71d2e709c

    • SHA1

      0f83954ef561f89ef6864ae0f490bea9fc09e10c

    • SHA256

      f4711a5ad18275cf2c6b121510a585bd904411db896d0eef8f40a097f4b9081c

    • SHA512

      731d953c2d45ca6844c4f5034459e9cdba250dc6b6450b80f931f5efee5b8356499bbf1e05f0989589f59f658d643ee4bf775befceb187f3c595f96fcc0da56e

    • SSDEEP

      49152:OKfuPS3ELNjV7uZxEfOfOgwf0+xl6G6kC3Sg:Zm9qZxwgXkC7

    Score
    7/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks