Overview

overview

7

Static

static

3

2024-04-21...uk.exe

windows7-x64

7

2024-04-21...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-21_fdcdb47364a0b0b8ea6012a8ecdd3cb6_ryuk

  • Size

    3.2MB

  • Sample

    240421-ppn5babg5v

  • MD5

    fdcdb47364a0b0b8ea6012a8ecdd3cb6

  • SHA1

    c0b6b7ead36b9eddb4b34f35179dad3f6bf83530

  • SHA256

    8442a073475de9838beb232ffb82a5b1fd9b15b03769554b4c4a353f609531f0

  • SHA512

    543a7be0694a9dabf8fab6f62b6842b9ff5d187103feb097c9a655bfad1cf96bbcd32d825889b9f01a58fb94a1d3a28456a09692f911ad30f81db8d0081dbe02

  • SSDEEP

    49152:b5k1YCdptya507NUUWn043oHS3fT8YwVq1/xT3DDbw0TUqyHDmg27RnWGj:vNhS4Yw8y/D527BWG

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-21_fdcdb47364a0b0b8ea6012a8ecdd3cb6_ryuk

    • Size

      3.2MB

    • MD5

      fdcdb47364a0b0b8ea6012a8ecdd3cb6

    • SHA1

      c0b6b7ead36b9eddb4b34f35179dad3f6bf83530

    • SHA256

      8442a073475de9838beb232ffb82a5b1fd9b15b03769554b4c4a353f609531f0

    • SHA512

      543a7be0694a9dabf8fab6f62b6842b9ff5d187103feb097c9a655bfad1cf96bbcd32d825889b9f01a58fb94a1d3a28456a09692f911ad30f81db8d0081dbe02

    • SSDEEP

      49152:b5k1YCdptya507NUUWn043oHS3fT8YwVq1/xT3DDbw0TUqyHDmg27RnWGj:vNhS4Yw8y/D527BWG

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks