Overview

overview

10

Static

static

10

2024-02-23...uk.exe

windows7-x64

9

2024-02-23...uk.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-23_17512948ac977a49f9e8976a86873365_ryuk

  • Size

    14.5MB

  • Sample

    240223-njne6afg46

  • MD5

    17512948ac977a49f9e8976a86873365

  • SHA1

    4251b97ea667160d8d27a4c66eee84cfc8d14a4f

  • SHA256

    1260d3b23e47b2ce5d9445e8e00c90ce36630e8cd6db057f56be10a857fb6589

  • SHA512

    ae70137b427a9b8ca43e60855b848055f5626f204691c23e10bf90dc2345084afbfddbb0b98c42cf30c9927888770efb2ef746b157100ea338badd6cd83b287c

  • SSDEEP

    196608:RZ7dIzfYP++zRtUaYrXwr68+aghNu7XWyBOKl4lCmK2ouuqrR:HWz6oaYrXwr68yNu7XLBOU45d

Score
10/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      2024-02-23_17512948ac977a49f9e8976a86873365_ryuk

    • Size

      14.5MB

    • MD5

      17512948ac977a49f9e8976a86873365

    • SHA1

      4251b97ea667160d8d27a4c66eee84cfc8d14a4f

    • SHA256

      1260d3b23e47b2ce5d9445e8e00c90ce36630e8cd6db057f56be10a857fb6589

    • SHA512

      ae70137b427a9b8ca43e60855b848055f5626f204691c23e10bf90dc2345084afbfddbb0b98c42cf30c9927888770efb2ef746b157100ea338badd6cd83b287c

    • SSDEEP

      196608:RZ7dIzfYP++zRtUaYrXwr68+aghNu7XWyBOKl4lCmK2ouuqrR:HWz6oaYrXwr68yNu7XLBOU45d

    Score
    9/10
    discoveryspywarestealer

    • Detects executables packed with Dotfuscator

    • Detects executables packed with SmartAssembly

    • Detects executables packed with Yano Obfuscator

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks