Overview

overview

7

Static

static

3

2024-04-17...uk.exe

windows7-x64

5

2024-04-17...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-17_057a31abb0b7ebf31a6be44773edaa7c_ryuk

  • Size

    2.1MB

  • Sample

    240417-km2v6sbf6z

  • MD5

    057a31abb0b7ebf31a6be44773edaa7c

  • SHA1

    1e5ba1c88fdfccf2ae458f18b3de36f78acbe5b0

  • SHA256

    405061ed7c8a6ca9212e8b25fe51554f89840d5d2c03f050672cee378e13180e

  • SHA512

    9fdd6ab02ce56e4fd27cc95bdda38d6dc75fb74167e908bd6680eba7356a5677cea7a8410a2906468ed731498273c45ada95bc514ebbc9d4a85f6b1b9601731e

  • SSDEEP

    49152:vjFX33t4INlfTqkUMLu/52bulcI1wXZTBz5tgDUYmvFur31yAipQCtXxc0H:v7fTqmeX1pU7dG1yfpVBlH

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-17_057a31abb0b7ebf31a6be44773edaa7c_ryuk

    • Size

      2.1MB

    • MD5

      057a31abb0b7ebf31a6be44773edaa7c

    • SHA1

      1e5ba1c88fdfccf2ae458f18b3de36f78acbe5b0

    • SHA256

      405061ed7c8a6ca9212e8b25fe51554f89840d5d2c03f050672cee378e13180e

    • SHA512

      9fdd6ab02ce56e4fd27cc95bdda38d6dc75fb74167e908bd6680eba7356a5677cea7a8410a2906468ed731498273c45ada95bc514ebbc9d4a85f6b1b9601731e

    • SSDEEP

      49152:vjFX33t4INlfTqkUMLu/52bulcI1wXZTBz5tgDUYmvFur31yAipQCtXxc0H:v7fTqmeX1pU7dG1yfpVBlH

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks