Overview

overview

7

Static

static

3

2024-04-21...uk.exe

windows7-x64

7

2024-04-21...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-21_f2610757ce69d5ad5ac682e8865b6856_ryuk

  • Size

    3.2MB

  • Sample

    240421-plz3eabc89

  • MD5

    f2610757ce69d5ad5ac682e8865b6856

  • SHA1

    e0e61c8b04c4fe09e3cc719fea8ca981491e6bdb

  • SHA256

    c96311ceb31d438d2cb3df82a844885bc80516cad456066b99acb86561c03e5f

  • SHA512

    71892611b270ba949a6c03c92c71be5db0ed4b4075db0636a499997781bb17568ff008341b237f3b0af59caadae45a167af57da48f60af60de1cafb4e8ec5f20

  • SSDEEP

    49152:T5k1YCdptya507NUUWn043oHS3fTIYwVq1/xT3DDbw0TUqyFaB0zj0yjoB2:HNhSMYw8y8B2Yyjl

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-21_f2610757ce69d5ad5ac682e8865b6856_ryuk

    • Size

      3.2MB

    • MD5

      f2610757ce69d5ad5ac682e8865b6856

    • SHA1

      e0e61c8b04c4fe09e3cc719fea8ca981491e6bdb

    • SHA256

      c96311ceb31d438d2cb3df82a844885bc80516cad456066b99acb86561c03e5f

    • SHA512

      71892611b270ba949a6c03c92c71be5db0ed4b4075db0636a499997781bb17568ff008341b237f3b0af59caadae45a167af57da48f60af60de1cafb4e8ec5f20

    • SSDEEP

      49152:T5k1YCdptya507NUUWn043oHS3fTIYwVq1/xT3DDbw0TUqyFaB0zj0yjoB2:HNhSMYw8y8B2Yyjl

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks