Overview

overview

7

Static

static

3

2024-04-19...uk.exe

windows7-x64

1

2024-04-19...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-19_41f7d329c627517a0d2b10d6d62032e0_ryuk

  • Size

    5.5MB

  • Sample

    240419-mtqslahh3w

  • MD5

    41f7d329c627517a0d2b10d6d62032e0

  • SHA1

    585d08588acad412c882672537519c6b0c1bab6b

  • SHA256

    f8763078dc87ddcdfcf00bbe582f82cb860b02d88cd1cd4d5e6bbc4e7dc203a1

  • SHA512

    c4b731786d5850484623cbe67b6d79dcbf499d08b1f156f1f5a5f07bb109a4ec8e828dec88794132c820d934a3b7a3b2e2e1578281a7a1f26024817e2d9b4e21

  • SSDEEP

    49152:nEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1bn9tJEUxDG0BYYrLA50IHLGf7:zAI5pAdV9n9tbnR1VgBVmQfEkKK90

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-19_41f7d329c627517a0d2b10d6d62032e0_ryuk

    • Size

      5.5MB

    • MD5

      41f7d329c627517a0d2b10d6d62032e0

    • SHA1

      585d08588acad412c882672537519c6b0c1bab6b

    • SHA256

      f8763078dc87ddcdfcf00bbe582f82cb860b02d88cd1cd4d5e6bbc4e7dc203a1

    • SHA512

      c4b731786d5850484623cbe67b6d79dcbf499d08b1f156f1f5a5f07bb109a4ec8e828dec88794132c820d934a3b7a3b2e2e1578281a7a1f26024817e2d9b4e21

    • SSDEEP

      49152:nEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1bn9tJEUxDG0BYYrLA50IHLGf7:zAI5pAdV9n9tbnR1VgBVmQfEkKK90

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks