Overview

overview

7

Static

static

3

2024-04-05...uk.exe

windows7-x64

1

2024-04-05...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-05_1c00bbe8db1100114af9ef8f7c2e7cc0_ryuk

  • Size

    1.9MB

  • Sample

    240405-m9wnsaag66

  • MD5

    1c00bbe8db1100114af9ef8f7c2e7cc0

  • SHA1

    2cc084d80c49dee295037dfec18b4baf64f53642

  • SHA256

    161422548e5b45fd155993c000ec60a547e611ce2d957c1be8bcb21a1c28963c

  • SHA512

    39e1283183a121435af100547a7c2132875e55154e3a40d5e9e49544398ad8fad48af67d3d6be462a8267d5e14e3e3b0f2e9c0245bb21a91e167407b5e9ab507

  • SSDEEP

    49152:NlOVDTtQY6SoNtaUJ6wUnHpclbwbWAaJiwmqTjco/aEQ9QWn8q12F:iq5UHxqPFgaWn8w

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-05_1c00bbe8db1100114af9ef8f7c2e7cc0_ryuk

    • Size

      1.9MB

    • MD5

      1c00bbe8db1100114af9ef8f7c2e7cc0

    • SHA1

      2cc084d80c49dee295037dfec18b4baf64f53642

    • SHA256

      161422548e5b45fd155993c000ec60a547e611ce2d957c1be8bcb21a1c28963c

    • SHA512

      39e1283183a121435af100547a7c2132875e55154e3a40d5e9e49544398ad8fad48af67d3d6be462a8267d5e14e3e3b0f2e9c0245bb21a91e167407b5e9ab507

    • SSDEEP

      49152:NlOVDTtQY6SoNtaUJ6wUnHpclbwbWAaJiwmqTjco/aEQ9QWn8q12F:iq5UHxqPFgaWn8w

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks