Overview

overview

7

Static

static

3

2024-01-27...uk.exe

windows7-x64

5

2024-01-27...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-27_eba9095d483a05bf509209944b8e3869_cobalt-strike_ryuk

  • Size

    946KB

  • Sample

    240127-ls51fsbdfr

  • MD5

    eba9095d483a05bf509209944b8e3869

  • SHA1

    a125032208d5e119f73411f0aeb48c26168f01d8

  • SHA256

    a9da39910044c94074895428991a1e707baba3da1f8102f03a909be33128f526

  • SHA512

    b3e9735f26fed25158d4aebae04a3b9b776f4d73c6a2525d9eb628234cf98f4e5c0161a26600bf82335a1d91fbf5340fd88b1a2b8b6e5d734b0c93bf6c5b811a

  • SSDEEP

    24576:zTgnpwJ+Ru/i328ab4F+rM/aXq6bJfBUam6:f0du/i3da1YS6ozB

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-01-27_eba9095d483a05bf509209944b8e3869_cobalt-strike_ryuk

    • Size

      946KB

    • MD5

      eba9095d483a05bf509209944b8e3869

    • SHA1

      a125032208d5e119f73411f0aeb48c26168f01d8

    • SHA256

      a9da39910044c94074895428991a1e707baba3da1f8102f03a909be33128f526

    • SHA512

      b3e9735f26fed25158d4aebae04a3b9b776f4d73c6a2525d9eb628234cf98f4e5c0161a26600bf82335a1d91fbf5340fd88b1a2b8b6e5d734b0c93bf6c5b811a

    • SSDEEP

      24576:zTgnpwJ+Ru/i328ab4F+rM/aXq6bJfBUam6:f0du/i3da1YS6ozB

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks