Overview

overview

7

Static

static

3

2024-04-20...uk.exe

windows7-x64

5

2024-04-20...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-20_e56ef4e8ab266625ce99a9a869f84357_ryuk

  • Size

    1.4MB

  • Sample

    240420-1m7dnabd3y

  • MD5

    e56ef4e8ab266625ce99a9a869f84357

  • SHA1

    afa187422c6ccec070bbde868e4b619af8344ff2

  • SHA256

    cde63a953039beb02eddfa772b4c9f2dd47959d4b1fe1509129b33841fe1daf3

  • SHA512

    c3eef4a1a65d650c28f9e5be12db5ef5469fd3714fff893ff8fa22ce6be000164a25367544492c4bcf1d236f10a16b5d70d1c2830a9f5bfe95318d1826efaba9

  • SSDEEP

    12288:RXDCAZzP/w24lh1Xc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DX:8ANw2431sqjnhMgeiCl7G0nehbGZpbD

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-20_e56ef4e8ab266625ce99a9a869f84357_ryuk

    • Size

      1.4MB

    • MD5

      e56ef4e8ab266625ce99a9a869f84357

    • SHA1

      afa187422c6ccec070bbde868e4b619af8344ff2

    • SHA256

      cde63a953039beb02eddfa772b4c9f2dd47959d4b1fe1509129b33841fe1daf3

    • SHA512

      c3eef4a1a65d650c28f9e5be12db5ef5469fd3714fff893ff8fa22ce6be000164a25367544492c4bcf1d236f10a16b5d70d1c2830a9f5bfe95318d1826efaba9

    • SSDEEP

      12288:RXDCAZzP/w24lh1Xc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DX:8ANw2431sqjnhMgeiCl7G0nehbGZpbD

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks