Overview

overview

7

Static

static

3

2024-01-19...uk.exe

windows7-x64

7

2024-01-19...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-19_17d2c3cceb784399c8f96d4112c9a13e_ryuk

  • Size

    4.1MB

  • Sample

    240119-lz8pxsbebk

  • MD5

    17d2c3cceb784399c8f96d4112c9a13e

  • SHA1

    ad8827de0030b06ed89f641a91117fd642718cfb

  • SHA256

    b5ca71ac6ab1f1c6ec79aa74f932eb619f201dcf17d1653fe5b295fdc02bc402

  • SHA512

    1d3b7afc60af9295a35d22a3e01437670394afe823213d1fa185bcbf87cf79d29d52c3cd004e7300a422f44180ac1e5417eba7e18a58b92193b2f9c2941e0590

  • SSDEEP

    49152:r5Viqwo4KxghcyJLBaSbvviqMjfBVrTFZ1bBzP7n1Y8/17MVfw1QSXm+RFvTCr9K:rBfrrTFFqRlw6a+nfEkKK90

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-01-19_17d2c3cceb784399c8f96d4112c9a13e_ryuk

    • Size

      4.1MB

    • MD5

      17d2c3cceb784399c8f96d4112c9a13e

    • SHA1

      ad8827de0030b06ed89f641a91117fd642718cfb

    • SHA256

      b5ca71ac6ab1f1c6ec79aa74f932eb619f201dcf17d1653fe5b295fdc02bc402

    • SHA512

      1d3b7afc60af9295a35d22a3e01437670394afe823213d1fa185bcbf87cf79d29d52c3cd004e7300a422f44180ac1e5417eba7e18a58b92193b2f9c2941e0590

    • SSDEEP

      49152:r5Viqwo4KxghcyJLBaSbvviqMjfBVrTFZ1bBzP7n1Y8/17MVfw1QSXm+RFvTCr9K:rBfrrTFFqRlw6a+nfEkKK90

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks