Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2025-03-17...uk.exe

windows10-2004-x64

10

2025-03-17...uk.exe

windows11-21h2-x64

10

Resubmissions

17/03/2025, 03:29

250317-d18sbayxhw 10

17/03/2025, 03:22

250317-dw9h2syxat 10

17/03/2025, 01:55

250317-cca1pswxc1 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-17_ff03d71dba0625380d825791779942dc_ryuk

  • Size

    11.7MB

  • Sample

    250317-dw9h2syxat

  • MD5

    ff03d71dba0625380d825791779942dc

  • SHA1

    f7d6e8f6701738718eb250926d73f3070157f913

  • SHA256

    b7def7c2139cdaa2483a681ed343133f1f034a4d53136d32157c89c8705a4765

  • SHA512

    ed32529a3a278af0e49507925806513baf90f6948d98f638cae31489efb30bdc23dfb916d405827aa6dfdc6856ef97bfd89832b17f5d1372759e92ecfd5fcc7d

  • SSDEEP

    196608:a8Hu1FcHZZY0MhCZBTX1QFhjwt25Hnuz48RmU/3ZlsPvXfg2TvN8C1Uggo19T20Q:1HuMHZilAHOHuztN3ZWXBTMw19Sy

Score
10/10
demonwarepyinstallerransomware

Malware Config

Targets

    • Target

      2025-03-17_ff03d71dba0625380d825791779942dc_ryuk

    • Size

      11.7MB

    • MD5

      ff03d71dba0625380d825791779942dc

    • SHA1

      f7d6e8f6701738718eb250926d73f3070157f913

    • SHA256

      b7def7c2139cdaa2483a681ed343133f1f034a4d53136d32157c89c8705a4765

    • SHA512

      ed32529a3a278af0e49507925806513baf90f6948d98f638cae31489efb30bdc23dfb916d405827aa6dfdc6856ef97bfd89832b17f5d1372759e92ecfd5fcc7d

    • SSDEEP

      196608:a8Hu1FcHZZY0MhCZBTX1QFhjwt25Hnuz48RmU/3ZlsPvXfg2TvN8C1Uggo19T20Q:1HuMHZilAHOHuztN3ZWXBTMw19Sy

    Score
    10/10
    demonwareransomware

    • DemonWare

      Ransomware first seen in mid-2020.

      ransomwaredemonware

    • Demonware family

      demonware

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks