Overview

overview

7

Static

static

3

2024-04-18...uk.exe

windows7-x64

7

2024-04-18...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-18_6a7ab1c1ef986b3fa03dc62c8e513581_ryuk

  • Size

    3.2MB

  • Sample

    240418-mcp5qsbe4v

  • MD5

    6a7ab1c1ef986b3fa03dc62c8e513581

  • SHA1

    52830039740d7df3e1b185fb7117e28a8071b1c5

  • SHA256

    f4ba86d1d8415967c32a350dc31da2765fdc13741e37504befaa0b61cb52295f

  • SHA512

    36f06813ecfa606a172890848280fc62db1d1bb3c861242450c6056444dfacadfb589bf48ad32e411275749cf8845a70ee11e1ce4f3cd01bf87f10613e85c49c

  • SSDEEP

    49152:d5k1YCdptya507NUUWn043oHS3fTIYwVq1/xT3DDbwwTU+eWgDUYmvFur31yAipZ:9NhSMYw8OrU7dG1yfpVBlH

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-18_6a7ab1c1ef986b3fa03dc62c8e513581_ryuk

    • Size

      3.2MB

    • MD5

      6a7ab1c1ef986b3fa03dc62c8e513581

    • SHA1

      52830039740d7df3e1b185fb7117e28a8071b1c5

    • SHA256

      f4ba86d1d8415967c32a350dc31da2765fdc13741e37504befaa0b61cb52295f

    • SHA512

      36f06813ecfa606a172890848280fc62db1d1bb3c861242450c6056444dfacadfb589bf48ad32e411275749cf8845a70ee11e1ce4f3cd01bf87f10613e85c49c

    • SSDEEP

      49152:d5k1YCdptya507NUUWn043oHS3fTIYwVq1/xT3DDbwwTU+eWgDUYmvFur31yAipZ:9NhSMYw8OrU7dG1yfpVBlH

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks