Overview

overview

7

Static

static

3

2024-04-21...uk.exe

windows7-x64

7

2024-04-21...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-21_88a0f86ca96a7b6abc8cec54a06abd39_ryuk

  • Size

    3.2MB

  • Sample

    240421-npyhbaad8v

  • MD5

    88a0f86ca96a7b6abc8cec54a06abd39

  • SHA1

    1d3c2471764a9a3390fb8a68567fa56ee343c891

  • SHA256

    be8df84d9f11832440bbf7aeb68d7bca6620e2e058502692680aac6450dadf7e

  • SHA512

    858484ff9927917864b3a4a2967b05c59842168e4bf6f615785becc42b2d133708fde4a00dd03ee584f3aa37f50376e96270b856b7b46463cf8affd311d48575

  • SSDEEP

    49152:X5k1YCdptya507NUUWn043oHS3fTIYwVq1/xT3DDbw0TUqy3/snji6attJM:rNhSMYw8yvEnW6at

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-21_88a0f86ca96a7b6abc8cec54a06abd39_ryuk

    • Size

      3.2MB

    • MD5

      88a0f86ca96a7b6abc8cec54a06abd39

    • SHA1

      1d3c2471764a9a3390fb8a68567fa56ee343c891

    • SHA256

      be8df84d9f11832440bbf7aeb68d7bca6620e2e058502692680aac6450dadf7e

    • SHA512

      858484ff9927917864b3a4a2967b05c59842168e4bf6f615785becc42b2d133708fde4a00dd03ee584f3aa37f50376e96270b856b7b46463cf8affd311d48575

    • SSDEEP

      49152:X5k1YCdptya507NUUWn043oHS3fTIYwVq1/xT3DDbw0TUqy3/snji6attJM:rNhSMYw8yvEnW6at

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks