Overview

overview

9

Static

static

3

2024-03-07...uk.exe

windows7-x64

7

2024-03-07...uk.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-07_f8bb0d3a72b6af0d77e7746f266cfe78_ryuk

  • Size

    3.2MB

  • Sample

    240307-l4869ahh4z

  • MD5

    f8bb0d3a72b6af0d77e7746f266cfe78

  • SHA1

    4e78787b03dbab32b4674baf4964ea036c58f68d

  • SHA256

    8c5a88d326bd991c268e3ea8ebc6f697803629747fa71eb613caf62acf341e72

  • SHA512

    d055f1d52612089e9dc04bc782b20eae4fe67cd83e47af11fe2cdc71054e2f6bf154e44d47b0658a9ac75ad5bba708d122c7c11593264bd8e00e1c2a9e37b790

  • SSDEEP

    49152:25k1YCdptya507NUUWn043oHS3fTGYwVq1/xT3DDbwwTU+ec/snji6attJM:QNhSqYw8OkEnW6at

Score
9/10
spywarestealer

Malware Config

Targets

    • Target

      2024-03-07_f8bb0d3a72b6af0d77e7746f266cfe78_ryuk

    • Size

      3.2MB

    • MD5

      f8bb0d3a72b6af0d77e7746f266cfe78

    • SHA1

      4e78787b03dbab32b4674baf4964ea036c58f68d

    • SHA256

      8c5a88d326bd991c268e3ea8ebc6f697803629747fa71eb613caf62acf341e72

    • SHA512

      d055f1d52612089e9dc04bc782b20eae4fe67cd83e47af11fe2cdc71054e2f6bf154e44d47b0658a9ac75ad5bba708d122c7c11593264bd8e00e1c2a9e37b790

    • SSDEEP

      49152:25k1YCdptya507NUUWn043oHS3fTGYwVq1/xT3DDbwwTU+ec/snji6attJM:QNhSqYw8OkEnW6at

    Score
    9/10
    spywarestealer

    • Detects executables containing bas64 encoded gzip files

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks