Overview

overview

7

Static

static

3

2024-04-22...uk.exe

windows7-x64

1

2024-04-22...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-22_765c83b99a0556eb43b341e03400dba8_ryuk

  • Size

    5.5MB

  • Sample

    240422-tevlkadb39

  • MD5

    765c83b99a0556eb43b341e03400dba8

  • SHA1

    da16e5698d7c9de89d6bfc8ab279f7dc6c235931

  • SHA256

    ec68eec40a8f707339220bca5d0f8443c83ea66c740df5374477712a982718a7

  • SHA512

    40b5992f17e97adf8428ae227f100da0ffde5cf1c5a654abf92383809fafb737ac451183e6b771493ec4616812f5a66f2e8fe65ff1a63111ea3227468e7204a9

  • SSDEEP

    98304:IAI5pAdVJn9tbnR1VgBVm6U7dG1yfpVBlH:IAsCh7XY7UoiPBx

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-22_765c83b99a0556eb43b341e03400dba8_ryuk

    • Size

      5.5MB

    • MD5

      765c83b99a0556eb43b341e03400dba8

    • SHA1

      da16e5698d7c9de89d6bfc8ab279f7dc6c235931

    • SHA256

      ec68eec40a8f707339220bca5d0f8443c83ea66c740df5374477712a982718a7

    • SHA512

      40b5992f17e97adf8428ae227f100da0ffde5cf1c5a654abf92383809fafb737ac451183e6b771493ec4616812f5a66f2e8fe65ff1a63111ea3227468e7204a9

    • SSDEEP

      98304:IAI5pAdVJn9tbnR1VgBVm6U7dG1yfpVBlH:IAsCh7XY7UoiPBx

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks