Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-10-14...uk.exe

windows7-x64

7

2024-10-14...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-14_2413616fe76f5ddbc99f09977dc93920_cobalt-strike_ryuk

  • Size

    1.8MB

  • Sample

    241014-rq17datdpk

  • MD5

    2413616fe76f5ddbc99f09977dc93920

  • SHA1

    9dd13a352720578331dff51424fe6314d5ce6875

  • SHA256

    aa918e251dd2db36402f06da07b87d9733be2a735bb0d056c0ebc1b79a5751be

  • SHA512

    078412a39d2ab3053ae3c5cb0e281fe2c8dfa2c41f36ce7772c24d52dd45c4a1807fe182bef78376f63daa83671bf16e47f5bfb2b79c67efabbda98682a091c4

  • SSDEEP

    49152:cKfuPS3ELNjV7IZxEfOfOgwf0/Di4DKhmWLIhukd/aJT:7m9sZxwgbi4DFR0yC

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      2024-10-14_2413616fe76f5ddbc99f09977dc93920_cobalt-strike_ryuk

    • Size

      1.8MB

    • MD5

      2413616fe76f5ddbc99f09977dc93920

    • SHA1

      9dd13a352720578331dff51424fe6314d5ce6875

    • SHA256

      aa918e251dd2db36402f06da07b87d9733be2a735bb0d056c0ebc1b79a5751be

    • SHA512

      078412a39d2ab3053ae3c5cb0e281fe2c8dfa2c41f36ce7772c24d52dd45c4a1807fe182bef78376f63daa83671bf16e47f5bfb2b79c67efabbda98682a091c4

    • SSDEEP

      49152:cKfuPS3ELNjV7IZxEfOfOgwf0/Di4DKhmWLIhukd/aJT:7m9sZxwgbi4DFR0yC

    Score
    7/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks