Overview

overview

7

Static

static

3

2024-04-04...uk.exe

windows7-x64

1

2024-04-04...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-04_846606136b9eed8e6126080f70f11a35_ryuk

  • Size

    5.5MB

  • Sample

    240404-2prlnacd5w

  • MD5

    846606136b9eed8e6126080f70f11a35

  • SHA1

    96c934ee6e35f1460020488dec146c6b91ff9dc7

  • SHA256

    3aaaae64c28d6a53f4e33db36b33546500c15c3e50791b1bfb1d64be9435dbaf

  • SHA512

    337907004e0e3156ae12f2ca646239f9ddad43e443237a8e67edb972107315c76f1d5f6dc3f928b57c1c45a3d6ec1a48d877dc38715d00a46b6551929261aa71

  • SSDEEP

    98304:LAI5pAdVJn9tbnR1VgBVmq70uMhSBrkNq:LAsCh7XYFIoQ

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-04_846606136b9eed8e6126080f70f11a35_ryuk

    • Size

      5.5MB

    • MD5

      846606136b9eed8e6126080f70f11a35

    • SHA1

      96c934ee6e35f1460020488dec146c6b91ff9dc7

    • SHA256

      3aaaae64c28d6a53f4e33db36b33546500c15c3e50791b1bfb1d64be9435dbaf

    • SHA512

      337907004e0e3156ae12f2ca646239f9ddad43e443237a8e67edb972107315c76f1d5f6dc3f928b57c1c45a3d6ec1a48d877dc38715d00a46b6551929261aa71

    • SSDEEP

      98304:LAI5pAdVJn9tbnR1VgBVmq70uMhSBrkNq:LAsCh7XYFIoQ

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks