Overview

overview

7

Static

static

3

2024-02-24...uk.exe

windows7-x64

5

2024-02-24...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-24_6badeae36da5e17b741436e8e10c98ad_cobalt-strike_ryuk

  • Size

    994KB

  • Sample

    240224-gev6wabh2z

  • MD5

    6badeae36da5e17b741436e8e10c98ad

  • SHA1

    9f024c70427880652993f77432534a584bcf9bf1

  • SHA256

    092a852b4b60a1f6f900483aba32b5ac7a16e41509db3f5c9aa71e648af406fb

  • SHA512

    39f0609be5ff5f0393d74cf34af3529d378f024b4b8b89a1d3227969b540729c43cbb6f092bd698be6040c5b286051e944c96a85441b6fb537bfe637f3c24fa6

  • SSDEEP

    24576:WYRO7Y2cb+cREIJ8BPuTcVZ4zYAfzjTxopT:vcLcnR4BGcvonTxopT

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-02-24_6badeae36da5e17b741436e8e10c98ad_cobalt-strike_ryuk

    • Size

      994KB

    • MD5

      6badeae36da5e17b741436e8e10c98ad

    • SHA1

      9f024c70427880652993f77432534a584bcf9bf1

    • SHA256

      092a852b4b60a1f6f900483aba32b5ac7a16e41509db3f5c9aa71e648af406fb

    • SHA512

      39f0609be5ff5f0393d74cf34af3529d378f024b4b8b89a1d3227969b540729c43cbb6f092bd698be6040c5b286051e944c96a85441b6fb537bfe637f3c24fa6

    • SSDEEP

      24576:WYRO7Y2cb+cREIJ8BPuTcVZ4zYAfzjTxopT:vcLcnR4BGcvonTxopT

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks