Overview

overview

7

Static

static

3

2024-04-05...uk.exe

windows7-x64

1

2024-04-05...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-05_f32ae93687d952490a090df57f74c236_ryuk

  • Size

    5.5MB

  • Sample

    240405-yhpxpscg52

  • MD5

    f32ae93687d952490a090df57f74c236

  • SHA1

    496a87204f1f1a3ae198004f59f1bed77e269e71

  • SHA256

    9185520c4aee665db3e325e317055cdb146750d56fc0e7a214aa7972e17c7269

  • SHA512

    fa335c302b493335a5516a5db16c48024d26ed87e3685f1bf97c7d42d0672dbfd1274ad47a71b434bc3f5a647478cfaf946bf17e1a044cdb16b69a00eeb4dea9

  • SSDEEP

    49152:fEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfR:bAI5pAdVJn9tbnR1VgBVmj/iyB

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-05_f32ae93687d952490a090df57f74c236_ryuk

    • Size

      5.5MB

    • MD5

      f32ae93687d952490a090df57f74c236

    • SHA1

      496a87204f1f1a3ae198004f59f1bed77e269e71

    • SHA256

      9185520c4aee665db3e325e317055cdb146750d56fc0e7a214aa7972e17c7269

    • SHA512

      fa335c302b493335a5516a5db16c48024d26ed87e3685f1bf97c7d42d0672dbfd1274ad47a71b434bc3f5a647478cfaf946bf17e1a044cdb16b69a00eeb4dea9

    • SSDEEP

      49152:fEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfR:bAI5pAdVJn9tbnR1VgBVmj/iyB

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks