Overview

overview

7

Static

static

3

2024-04-17...uk.exe

windows7-x64

1

2024-04-17...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-17_b1d8edb95e3c10cc52e948613a4fc82a_ryuk

  • Size

    5.5MB

  • Sample

    240417-wq1casah9s

  • MD5

    b1d8edb95e3c10cc52e948613a4fc82a

  • SHA1

    8543288105e00e1dfb0a686835e7b005529176aa

  • SHA256

    488073cd1e8b40bd1d9a7f122f109e7fb496bb26c97792823e69b41cfd381109

  • SHA512

    b6cee70f635d1d84dc582f6a443f9cbed0e6fb9eb23cb328577510b34d916151c206ea2d0ddef6792997f67c0f7e9ece76ccb0a908a4ce6f81a3a4c0edd9712a

  • SSDEEP

    49152:9EFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1tn9tJEUxDG0BYYrLA50IHLGfr:BAI5pAdV/n9tbnR1VgBVmaD527BWG

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-17_b1d8edb95e3c10cc52e948613a4fc82a_ryuk

    • Size

      5.5MB

    • MD5

      b1d8edb95e3c10cc52e948613a4fc82a

    • SHA1

      8543288105e00e1dfb0a686835e7b005529176aa

    • SHA256

      488073cd1e8b40bd1d9a7f122f109e7fb496bb26c97792823e69b41cfd381109

    • SHA512

      b6cee70f635d1d84dc582f6a443f9cbed0e6fb9eb23cb328577510b34d916151c206ea2d0ddef6792997f67c0f7e9ece76ccb0a908a4ce6f81a3a4c0edd9712a

    • SSDEEP

      49152:9EFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1tn9tJEUxDG0BYYrLA50IHLGfr:BAI5pAdV/n9tbnR1VgBVmaD527BWG

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks