Overview

overview

7

Static

static

3

2024-04-06...uk.exe

windows7-x64

5

2024-04-06...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-06_7212e7e3c09232830c1766a65a8b0fb5_ryuk

  • Size

    1.6MB

  • Sample

    240406-pvsdxsad8s

  • MD5

    7212e7e3c09232830c1766a65a8b0fb5

  • SHA1

    f191e13d6580ac6106d987b104d3e40eb37e0400

  • SHA256

    23dd6a8feb30c157b415669d085f68fdb4bb8086bc34ec5a462fc347378a0868

  • SHA512

    34d538da43e35ab4f5b31bdbf6b8de27f546bc5c569953c18dc7b10a6b0493f5e077232f49ff600a11b322e3de2218650f189b4006c99d3212212fc8aca7054a

  • SSDEEP

    24576:0TfnpwJ+RzV49pFT0SLTQYWkK2u4dax8C:8fdzs7YSLTQYWkK2/

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-06_7212e7e3c09232830c1766a65a8b0fb5_ryuk

    • Size

      1.6MB

    • MD5

      7212e7e3c09232830c1766a65a8b0fb5

    • SHA1

      f191e13d6580ac6106d987b104d3e40eb37e0400

    • SHA256

      23dd6a8feb30c157b415669d085f68fdb4bb8086bc34ec5a462fc347378a0868

    • SHA512

      34d538da43e35ab4f5b31bdbf6b8de27f546bc5c569953c18dc7b10a6b0493f5e077232f49ff600a11b322e3de2218650f189b4006c99d3212212fc8aca7054a

    • SSDEEP

      24576:0TfnpwJ+RzV49pFT0SLTQYWkK2u4dax8C:8fdzs7YSLTQYWkK2/

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks