Overview

overview

7

Static

static

3

2024-04-20...uk.exe

windows7-x64

1

2024-04-20...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-20_0c3bbcda37a7b5f45ce0726750684156_ryuk

  • Size

    5.5MB

  • Sample

    240420-mhbvased39

  • MD5

    0c3bbcda37a7b5f45ce0726750684156

  • SHA1

    80fa8baced87c7e4c3f8b6a32843e9a0898b2db0

  • SHA256

    a4b7dd67e9ee3f4a7bed9072237fbe8eb520e7325e340fa76e35ce7b1994051f

  • SHA512

    a53ff8b8b005be25cec4007b574f3218bcbd6da8e8b8e89fe136133b2da7af6cc6fb2cb55812e99ac6d0bbcf6780269b308e7b47f91b89a7aa3e274d7e081dba

  • SSDEEP

    49152:iEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGf+:oAI5pAdVJn9tbnR1VgBVmg4Sp

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-20_0c3bbcda37a7b5f45ce0726750684156_ryuk

    • Size

      5.5MB

    • MD5

      0c3bbcda37a7b5f45ce0726750684156

    • SHA1

      80fa8baced87c7e4c3f8b6a32843e9a0898b2db0

    • SHA256

      a4b7dd67e9ee3f4a7bed9072237fbe8eb520e7325e340fa76e35ce7b1994051f

    • SHA512

      a53ff8b8b005be25cec4007b574f3218bcbd6da8e8b8e89fe136133b2da7af6cc6fb2cb55812e99ac6d0bbcf6780269b308e7b47f91b89a7aa3e274d7e081dba

    • SSDEEP

      49152:iEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGf+:oAI5pAdVJn9tbnR1VgBVmg4Sp

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks