Overview

overview

9

Static

static

3

2024-03-29...uk.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-29_7c4a1c2587bb6892ada8e888dd9838a5_ryuk

  • Size

    4.6MB

  • Sample

    240329-vfvhmade52

  • MD5

    7c4a1c2587bb6892ada8e888dd9838a5

  • SHA1

    58aeb1bde6bbc18fc936f02163ff62d242b8c72f

  • SHA256

    2675d33b600fa598abcba7d4e8c7b436e3c3833ab6c8db4d4a5dd84a446edf45

  • SHA512

    e0a6c4d8873ae00db89144502fb3b0760378b61ced76f15eae7d59259941706bdbeb3dbc7b57c678f58afda03fc8dc289611abcb9edb88cb8ef5da10c682ed0d

  • SSDEEP

    49152:cyEKQ5E3ieYR0PEtBFUow1b89eX611+2xmepnUTRijbqYW3qkCbDypSfe6qwiXeK:Aq9ceqz+2xlUSSgxpD527BWG

Score
9/10
spywarestealer

Malware Config

Targets

    • Target

      2024-03-29_7c4a1c2587bb6892ada8e888dd9838a5_ryuk

    • Size

      4.6MB

    • MD5

      7c4a1c2587bb6892ada8e888dd9838a5

    • SHA1

      58aeb1bde6bbc18fc936f02163ff62d242b8c72f

    • SHA256

      2675d33b600fa598abcba7d4e8c7b436e3c3833ab6c8db4d4a5dd84a446edf45

    • SHA512

      e0a6c4d8873ae00db89144502fb3b0760378b61ced76f15eae7d59259941706bdbeb3dbc7b57c678f58afda03fc8dc289611abcb9edb88cb8ef5da10c682ed0d

    • SSDEEP

      49152:cyEKQ5E3ieYR0PEtBFUow1b89eX611+2xmepnUTRijbqYW3qkCbDypSfe6qwiXeK:Aq9ceqz+2xlUSSgxpD527BWG

    Score
    9/10
    spywarestealer

    • Detects executables containing bas64 encoded gzip files

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks