Overview

overview

7

Static

static

3

2024-04-18...uk.exe

windows7-x64

1

2024-04-18...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-18_87275c9f56e90cfbdf8efffccc5fd35c_ryuk

  • Size

    5.5MB

  • Sample

    240418-x6147sdh9z

  • MD5

    87275c9f56e90cfbdf8efffccc5fd35c

  • SHA1

    f498491b097c4654969735cf2a8598612048a821

  • SHA256

    060b4511c5dadfa965a68436b707f81581e356dc4f74afd2047888d89bc26653

  • SHA512

    249c1fcae54e970e1f9dab509b2306e3c3a678763afd28fb1a81f001e497950051cddee47d02c273dcc9774d75007ad5e61121cbfa1e35efc9a8b4469d5eb017

  • SSDEEP

    49152:yEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfd:YAI5pAdVJn9tbnR1VgBVmwKtY598E

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-18_87275c9f56e90cfbdf8efffccc5fd35c_ryuk

    • Size

      5.5MB

    • MD5

      87275c9f56e90cfbdf8efffccc5fd35c

    • SHA1

      f498491b097c4654969735cf2a8598612048a821

    • SHA256

      060b4511c5dadfa965a68436b707f81581e356dc4f74afd2047888d89bc26653

    • SHA512

      249c1fcae54e970e1f9dab509b2306e3c3a678763afd28fb1a81f001e497950051cddee47d02c273dcc9774d75007ad5e61121cbfa1e35efc9a8b4469d5eb017

    • SSDEEP

      49152:yEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfd:YAI5pAdVJn9tbnR1VgBVmwKtY598E

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks