Overview

overview

7

Static

static

3

2024-02-14...uk.exe

windows7-x64

5

2024-02-14...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-14_4d99784aa40a6534d547d59ee27c2a17_cobalt-strike_ryuk

  • Size

    796KB

  • Sample

    240214-q7et2add79

  • MD5

    4d99784aa40a6534d547d59ee27c2a17

  • SHA1

    fee94e7bea64a0768aa369062c129ad1c5594b4b

  • SHA256

    e82729c43fc322484f20402c292e4ba43a825f25d1b715d03939af3188c9b497

  • SHA512

    8c33b09414a1b0842ecd13fa0579d4bfcb09dd61e034caa6f543ac8c0f086cfe4e94e9342ba9bc1ddd1a8c34828c2706b089ed4bb117c6ec449d6038e6075576

  • SSDEEP

    24576:4ANw243c+L6VMRCPU6CENltmVVdpx7fLrQWd:4ew2e6ZU6CENlc7dpJLrQWd

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-02-14_4d99784aa40a6534d547d59ee27c2a17_cobalt-strike_ryuk

    • Size

      796KB

    • MD5

      4d99784aa40a6534d547d59ee27c2a17

    • SHA1

      fee94e7bea64a0768aa369062c129ad1c5594b4b

    • SHA256

      e82729c43fc322484f20402c292e4ba43a825f25d1b715d03939af3188c9b497

    • SHA512

      8c33b09414a1b0842ecd13fa0579d4bfcb09dd61e034caa6f543ac8c0f086cfe4e94e9342ba9bc1ddd1a8c34828c2706b089ed4bb117c6ec449d6038e6075576

    • SSDEEP

      24576:4ANw243c+L6VMRCPU6CENltmVVdpx7fLrQWd:4ew2e6ZU6CENlc7dpJLrQWd

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks