Overview

overview

10

Static

static

galadriel

windows7_x64

10

Resubmissions

02/11/2020, 09:26

201102-arw84b2l7a10

01/11/2020, 18:55

201101-6vvhqyxv6n8

Sharing

Copy URL Twitter E-mail

General

  • Target
    d5d744e0f7984ec01593da35f26bf24e95e4b1cc8bd1c0ff4f31de5dbf94e38f.bin.sample
  • Size 133KB
  • Sample201102-arw84b2l7a
  • SHA256 d5d744e0f7984ec01593da35f26bf24e95e4b1cc8bd1c0ff4f31de5dbf94e38f
  • MD5 SHA1 SHA512
Score
10/10
ryukdiscoveryransomwarespyware

Malware Config

Targets

    • Target
      d5d744e0f7984ec01593da35f26bf24e95e4b1cc8bd1c0ff4f31de5dbf94e38f.bin.sample
    • Size 133KB
    • SHA256 d5d744e0f7984ec01593da35f26bf24e95e4b1cc8bd1c0ff4f31de5dbf94e38f
    • MD5 SHA1 SHA512
    Score
    10/10
    ryukdiscoveryransomwarespyware

    • Ryuk

      Ransomware distributed via existing botnets, often Trickbot or Emotet.

      ransomwareryuk

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks