Overview

overview

7

Static

static

3

2024-01-23...uk.exe

windows7-x64

1

2024-01-23...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-23_e004b8d9e548928f168779c50bf624ab_ryuk

  • Size

    2.4MB

  • Sample

    240123-yllpfsgdcn

  • MD5

    e004b8d9e548928f168779c50bf624ab

  • SHA1

    e1b0785612056235fbbee8d7db52a76c258160b4

  • SHA256

    298536cdcb72e7f66715a946ad7a39738fbcbbd0224d89f01dcce131e8bc7c19

  • SHA512

    1d8f6f777989d717af39f30694386ed19d9523e6d82270d61ad43e085ec79d12040e406152de25684c085409b240820e1acf3ac9526cd1c1a79fcd9c9061d952

  • SSDEEP

    49152:WFk2kQ95lRfFUesqU7TSFnqvIUPJfzl2nKNbBDNxdjM:WvfsqTqzLprDNxdjM

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-01-23_e004b8d9e548928f168779c50bf624ab_ryuk

    • Size

      2.4MB

    • MD5

      e004b8d9e548928f168779c50bf624ab

    • SHA1

      e1b0785612056235fbbee8d7db52a76c258160b4

    • SHA256

      298536cdcb72e7f66715a946ad7a39738fbcbbd0224d89f01dcce131e8bc7c19

    • SHA512

      1d8f6f777989d717af39f30694386ed19d9523e6d82270d61ad43e085ec79d12040e406152de25684c085409b240820e1acf3ac9526cd1c1a79fcd9c9061d952

    • SSDEEP

      49152:WFk2kQ95lRfFUesqU7TSFnqvIUPJfzl2nKNbBDNxdjM:WvfsqTqzLprDNxdjM

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks