Overview

overview

7

Static

static

3

2024-02-01...uk.exe

windows7-x64

1

2024-02-01...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-01_d887bcdf86b13da136dfdbfac6f1a653_ryuk

  • Size

    5.5MB

  • Sample

    240201-3npw4sbbbm

  • MD5

    d887bcdf86b13da136dfdbfac6f1a653

  • SHA1

    6a5560a0f5b477d0b064252322755d9fbc127510

  • SHA256

    7e9a835ce3f0501d9a983fafabb10e294e8bf9bd2bd3658e38107a3ecedc2e7e

  • SHA512

    c746dd0fc6a714df35e8b743d55eabfb677e3ea49419b2840146c57c906561e9a8d36ebfee2d8050679ed46cef2496fe0773b4368ddff3934d78e5deb05c0ca3

  • SSDEEP

    49152:5EFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1bn9tJEUxDG0BYYrLA50IHLGfa:tAI5pAdV9n9tbnR1VgBVmhTcYhyp

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-02-01_d887bcdf86b13da136dfdbfac6f1a653_ryuk

    • Size

      5.5MB

    • MD5

      d887bcdf86b13da136dfdbfac6f1a653

    • SHA1

      6a5560a0f5b477d0b064252322755d9fbc127510

    • SHA256

      7e9a835ce3f0501d9a983fafabb10e294e8bf9bd2bd3658e38107a3ecedc2e7e

    • SHA512

      c746dd0fc6a714df35e8b743d55eabfb677e3ea49419b2840146c57c906561e9a8d36ebfee2d8050679ed46cef2496fe0773b4368ddff3934d78e5deb05c0ca3

    • SSDEEP

      49152:5EFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1bn9tJEUxDG0BYYrLA50IHLGfa:tAI5pAdV9n9tbnR1VgBVmhTcYhyp

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks