Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
17/01/2025, 08:07
Behavioral task
behavioral1
Sample
Ryuk .Net Ransomware Builder.exe
Resource
win7-20240903-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Ryuk .Net Ransomware Builder.exe
Resource
win10v2004-20241007-en
3 signatures
150 seconds
General
-
Target
Ryuk .Net Ransomware Builder.exe
-
Size
287KB
-
MD5
b20d5ada2e81683bda32aa80cd71c025
-
SHA1
1ab3daa872761d887ef0be9ace528ee323201211
-
SHA256
0d8b4a07e91e02335f600332644e8f0e504f75ab19899a58b2c85ecb0887c738
-
SHA512
94da5ae4e43e6b0fdc8d0a83d8a3f2991a47b6e12f6781cc6aecb2d8d97a2d0da6dc456e3618c1a36697862e1a7a50b27a036b3569f33889452fe921c6981d91
-
SSDEEP
3072:GVgr8/vRx5cCPaEy3YxB+DV0Ugr8/vfx:GSrS/yKrS
Score
10/10
Malware Config
Signatures
-
Chaos
Ransomware family first seen in June 2021.
-
Chaos Ransomware 1 IoCs
resource yara_rule behavioral1/memory/316-1-0x0000000001260000-0x00000000012AE000-memory.dmp family_chaos -
Chaos family