Overview

overview

7

Static

static

3

2024-04-21...uk.exe

windows7-x64

5

2024-04-21...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-21_0fa3e638bf2b35c41af1d936627d6738_ryuk

  • Size

    1.7MB

  • Sample

    240421-ndj6jshf49

  • MD5

    0fa3e638bf2b35c41af1d936627d6738

  • SHA1

    f753365ed5ba2041eb3dd6050cb0980744db8321

  • SHA256

    05aba3374ff4dc99f946b57cbaa70a90690d3b3507ab0b14f647de45dcd0b7a9

  • SHA512

    0f648aadc7f97dcb6718659a2db5b0003ceb441964834b48fd4e7f46a8fdd88d5b2aabb166dafe78527e1f82c866bf82d8fb6a3c8531242e2b1728dcf1eb5fe4

  • SSDEEP

    24576:BTgnpwJ+R42JOt934J7Z6bQaj1BvUm9J:d0djJE3jM2ce

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-21_0fa3e638bf2b35c41af1d936627d6738_ryuk

    • Size

      1.7MB

    • MD5

      0fa3e638bf2b35c41af1d936627d6738

    • SHA1

      f753365ed5ba2041eb3dd6050cb0980744db8321

    • SHA256

      05aba3374ff4dc99f946b57cbaa70a90690d3b3507ab0b14f647de45dcd0b7a9

    • SHA512

      0f648aadc7f97dcb6718659a2db5b0003ceb441964834b48fd4e7f46a8fdd88d5b2aabb166dafe78527e1f82c866bf82d8fb6a3c8531242e2b1728dcf1eb5fe4

    • SSDEEP

      24576:BTgnpwJ+R42JOt934J7Z6bQaj1BvUm9J:d0djJE3jM2ce

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks