Overview

overview

7

Static

static

3

2024-03-12...uk.exe

windows7-x64

7

2024-03-12...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-12_c5928104f64e3dac58c1cb4fce29e730_ryuk

  • Size

    1.1MB

  • Sample

    240312-ltdbtsdh21

  • MD5

    c5928104f64e3dac58c1cb4fce29e730

  • SHA1

    bed2f31fc59702cc485c31a9d06c7e11b88fc424

  • SHA256

    819f06821f6dd4346e40bc78da276c1bd14e4b61406bf1c0f3c1743ba6dba967

  • SHA512

    b1e5789a6ecbf3a9fb3b3710a17911ed0692e7c1582ac8079b225cbc929ccdb2c492ad610e92d33bfc6754bb27468d4b3a8a89c4a7458593a9e33cc77a746090

  • SSDEEP

    24576:YSi1SoCU5qJSr1eWPSCsP0MugC6eTrqtL+SgvqFE1d3ddJW3CAqPSbwL:YS7PLjeTrq0re0d37JWyAqAu

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-03-12_c5928104f64e3dac58c1cb4fce29e730_ryuk

    • Size

      1.1MB

    • MD5

      c5928104f64e3dac58c1cb4fce29e730

    • SHA1

      bed2f31fc59702cc485c31a9d06c7e11b88fc424

    • SHA256

      819f06821f6dd4346e40bc78da276c1bd14e4b61406bf1c0f3c1743ba6dba967

    • SHA512

      b1e5789a6ecbf3a9fb3b3710a17911ed0692e7c1582ac8079b225cbc929ccdb2c492ad610e92d33bfc6754bb27468d4b3a8a89c4a7458593a9e33cc77a746090

    • SSDEEP

      24576:YSi1SoCU5qJSr1eWPSCsP0MugC6eTrqtL+SgvqFE1d3ddJW3CAqPSbwL:YS7PLjeTrq0re0d37JWyAqAu

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks