Overview

overview

7

Static

static

3

2024-03-05...uk.exe

windows7-x64

1

2024-03-05...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-05_dc921f93801b09bf6b2e76c78d19f883_ryuk

  • Size

    5.5MB

  • Sample

    240305-p83rtafd5s

  • MD5

    dc921f93801b09bf6b2e76c78d19f883

  • SHA1

    a1716135b3a22c04d2c974cbb5871985eda2b807

  • SHA256

    c4e547c77cb6e20d610d3894d84d06f2083aed63a583b8e1a551f97864a3f93d

  • SHA512

    5f57be69a25c13d3c70d67366b9ad170d4f8f0104758ca02d3dc072db6d2e9269b205a6419e8c6eb62a886e98556adcc43578e81071a2a9e1945c1ce294f0901

  • SSDEEP

    98304:oAI5pAdVJn9tbnR1VgBVmEU7dG1yfpVBlH:oAsCh7XYtUoiPBx

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-03-05_dc921f93801b09bf6b2e76c78d19f883_ryuk

    • Size

      5.5MB

    • MD5

      dc921f93801b09bf6b2e76c78d19f883

    • SHA1

      a1716135b3a22c04d2c974cbb5871985eda2b807

    • SHA256

      c4e547c77cb6e20d610d3894d84d06f2083aed63a583b8e1a551f97864a3f93d

    • SHA512

      5f57be69a25c13d3c70d67366b9ad170d4f8f0104758ca02d3dc072db6d2e9269b205a6419e8c6eb62a886e98556adcc43578e81071a2a9e1945c1ce294f0901

    • SSDEEP

      98304:oAI5pAdVJn9tbnR1VgBVmEU7dG1yfpVBlH:oAsCh7XYtUoiPBx

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks