Overview

overview

7

Static

static

3

2024-01-29...uk.exe

windows7-x64

7

2024-01-29...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-29_ffa1273a70424530dcaefd2653d9a702_ryuk

  • Size

    4.1MB

  • Sample

    240129-lz4qzaggck

  • MD5

    ffa1273a70424530dcaefd2653d9a702

  • SHA1

    bf6dcbdb2e8d9293844b3c47c7b33b4942c9202e

  • SHA256

    ef94db86216765675e99c27257a8985a2445491fc6e0147caeca09eb89941b0c

  • SHA512

    10158e0375fc3f46ea7e53757a1b9a6239881e5c4d758289e3b2b63e7f920d7fc4a8b5ce8bf4739b54574125261a753fb0532f87bd87490e5ae513b54dda2036

  • SSDEEP

    49152:C5Viqwo4KxghcyJLBaSbvviqMjfBVgTFZ1bBzP7n1Y8/17MVfw1QSXm+RFvTCr9R:CBfrgTFFqRlw6a+qEnW6at

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-01-29_ffa1273a70424530dcaefd2653d9a702_ryuk

    • Size

      4.1MB

    • MD5

      ffa1273a70424530dcaefd2653d9a702

    • SHA1

      bf6dcbdb2e8d9293844b3c47c7b33b4942c9202e

    • SHA256

      ef94db86216765675e99c27257a8985a2445491fc6e0147caeca09eb89941b0c

    • SHA512

      10158e0375fc3f46ea7e53757a1b9a6239881e5c4d758289e3b2b63e7f920d7fc4a8b5ce8bf4739b54574125261a753fb0532f87bd87490e5ae513b54dda2036

    • SSDEEP

      49152:C5Viqwo4KxghcyJLBaSbvviqMjfBVgTFZ1bBzP7n1Y8/17MVfw1QSXm+RFvTCr9R:CBfrgTFFqRlw6a+qEnW6at

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks