Overview

overview

10

Static

static

10

2024-03-05...uk.exe

windows7-x64

9

2024-03-05...uk.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-05_326c65bdd7b5705d5b44c26d3cb5df72_ryuk

  • Size

    4.1MB

  • Sample

    240305-py3n3afa3x

  • MD5

    326c65bdd7b5705d5b44c26d3cb5df72

  • SHA1

    341d5211d4dbc6ec202b1212efd9bb38b9da1ea6

  • SHA256

    67f2146b105752242e67f8385a63baa06349fc73a1489ff4f2fb097e01fe7752

  • SHA512

    61cd89c9143d3985bff30a55340a1d28d11ae6909a71a0629a9e2704b8c94e2fbd9672bc26bb7e912987eeec4cfc8e543963807b50a5b6f6374968018516be34

  • SSDEEP

    98304:R1Q9qZFSd9o31ZlZP9ybmBCTauIejZc3j20L8ghQLj9INDwhPBlsR2Yv1sTF+:R1Q8yS1LxQbmkVjZczjL8ghQxIBwhPBw

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-03-05_326c65bdd7b5705d5b44c26d3cb5df72_ryuk

    • Size

      4.1MB

    • MD5

      326c65bdd7b5705d5b44c26d3cb5df72

    • SHA1

      341d5211d4dbc6ec202b1212efd9bb38b9da1ea6

    • SHA256

      67f2146b105752242e67f8385a63baa06349fc73a1489ff4f2fb097e01fe7752

    • SHA512

      61cd89c9143d3985bff30a55340a1d28d11ae6909a71a0629a9e2704b8c94e2fbd9672bc26bb7e912987eeec4cfc8e543963807b50a5b6f6374968018516be34

    • SSDEEP

      98304:R1Q9qZFSd9o31ZlZP9ybmBCTauIejZc3j20L8ghQLj9INDwhPBlsR2Yv1sTF+:R1Q8yS1LxQbmkVjZczjL8ghQxIBwhPBw

    Score
    9/10
    upx

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks