Overview

overview

10

Static

static

galadriel

windows7_x64

10

Resubmissions

02/11/2020, 09:24

201102-7dbe5bltjn10

02/11/2020, 08:10

201102-3my475sppj8

Sharing

Copy URL Twitter E-mail

General

  • Target
    6594508477464576.zip
  • Size 71KB
  • Sample201102-7dbe5bltjn
  • SHA256 8bd0c2de7af721194571df16912e01228e4e1d2a2f26470d7947f231c05b4269
  • MD5 SHA1 SHA512
Score
10/10
ryukdiscoveryransomwarespyware

Malware Config

Targets

    • Target
      ec3da4ac9ec917e66ab943ab149119807922f64f2e4960ebadc36fe7520b300f
    • Size 134KB
    • SHA256 ec3da4ac9ec917e66ab943ab149119807922f64f2e4960ebadc36fe7520b300f
    • MD5 SHA1 SHA512
    Score
    10/10
    ryukdiscoveryransomwarespyware

    • Ryuk

      Ransomware distributed via existing botnets, often Trickbot or Emotet.

      ransomwareryuk

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks