Overview

overview

7

Static

static

3

2024-04-21...uk.exe

windows7-x64

5

2024-04-21...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-21_5be04ab0f055d819b92b6130d1c3982a_ryuk

  • Size

    1.9MB

  • Sample

    240421-nc1rxaaa4z

  • MD5

    5be04ab0f055d819b92b6130d1c3982a

  • SHA1

    22551fd0872e7df69077e93c3108321d8443a790

  • SHA256

    e1c9ad24649a56b1d5685286c26133563914f159cde5e320267d3f651bee272a

  • SHA512

    29e8b6713e4788f3c6e17deccc065dd76209153a557ad41f3ba7af43d366a6968252bf32be99ae99a3b15faf24b48748f4c92e8a9292641d1a3d5155fd2af3af

  • SSDEEP

    49152:8lOVDTtQY6SoNtaUJ67UnHpclbwbWAaJiwmqTjcoW330REwkTAII:DqSUHxqPFUnKkT

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-21_5be04ab0f055d819b92b6130d1c3982a_ryuk

    • Size

      1.9MB

    • MD5

      5be04ab0f055d819b92b6130d1c3982a

    • SHA1

      22551fd0872e7df69077e93c3108321d8443a790

    • SHA256

      e1c9ad24649a56b1d5685286c26133563914f159cde5e320267d3f651bee272a

    • SHA512

      29e8b6713e4788f3c6e17deccc065dd76209153a557ad41f3ba7af43d366a6968252bf32be99ae99a3b15faf24b48748f4c92e8a9292641d1a3d5155fd2af3af

    • SSDEEP

      49152:8lOVDTtQY6SoNtaUJ67UnHpclbwbWAaJiwmqTjcoW330REwkTAII:DqSUHxqPFUnKkT

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks