Overview

overview

10

Static

static

3

2024-03-28...uk.exe

windows7-x64

10

2024-03-28...uk.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-28_af5d43475fb5a2cfb98d359d08df7fd1_ryuk

  • Size

    4.9MB

  • Sample

    240328-ks1kasgg7v

  • MD5

    af5d43475fb5a2cfb98d359d08df7fd1

  • SHA1

    af757310b7d75513842e7b05d9ebe0855c88ee00

  • SHA256

    94717ff72ab2c2465df984bed7d3c81e0625ae27324f59e0aed6b5f9e428c3ef

  • SHA512

    4767b0407fb5cb617f56bcfc35863ae0537e06563bbd213b401c068053326092e4e9d1186f6702827fb547046c7c848f7fa07ddd78f235b6e0ccd25d2bc9df8e

  • SSDEEP

    98304:KAsskRAdKvmGy0cljyi9vzlVkOekp/ekPjqgBE0d:OskRM3U0BV4kYmqQ9

Score
10/10
evasion

Malware Config

Targets

    • Target

      2024-03-28_af5d43475fb5a2cfb98d359d08df7fd1_ryuk

    • Size

      4.9MB

    • MD5

      af5d43475fb5a2cfb98d359d08df7fd1

    • SHA1

      af757310b7d75513842e7b05d9ebe0855c88ee00

    • SHA256

      94717ff72ab2c2465df984bed7d3c81e0625ae27324f59e0aed6b5f9e428c3ef

    • SHA512

      4767b0407fb5cb617f56bcfc35863ae0537e06563bbd213b401c068053326092e4e9d1186f6702827fb547046c7c848f7fa07ddd78f235b6e0ccd25d2bc9df8e

    • SSDEEP

      98304:KAsskRAdKvmGy0cljyi9vzlVkOekp/ekPjqgBE0d:OskRM3U0BV4kYmqQ9

    Score
    10/10
    evasion

    • Modifies firewall policy service

      evasion

    • Deletes itself

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks