Overview

overview

7

Static

static

3

2024-04-25...uk.exe

windows7-x64

7

2024-04-25...uk.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-25_c8ebd85ab42c716d537f3dcef873b65a_cobalt-strike_ryuk

  • Size

    796KB

  • Sample

    240425-1pndkafe3y

  • MD5

    c8ebd85ab42c716d537f3dcef873b65a

  • SHA1

    f8c7c636ac9fbbb5500ea604b8508a27f19b233a

  • SHA256

    1b57c9a295d0be855acbeadfabcaaa4e3d2b7faf1226af5cc9b65e159f9a5025

  • SHA512

    a09cc3be0cba14a7640a8ec2ea8b0680ca3c53b8b39fdc21a8d2116b6916db3f7fd002ba30f995cf7b99d65a5a6a2ba554fe54715adce172845145f87493b7eb

  • SSDEEP

    24576:bANw2430/i328ab4F+rM/aXq6bJfBUam6:bew2p/i3da1YS6ozB

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-25_c8ebd85ab42c716d537f3dcef873b65a_cobalt-strike_ryuk

    • Size

      796KB

    • MD5

      c8ebd85ab42c716d537f3dcef873b65a

    • SHA1

      f8c7c636ac9fbbb5500ea604b8508a27f19b233a

    • SHA256

      1b57c9a295d0be855acbeadfabcaaa4e3d2b7faf1226af5cc9b65e159f9a5025

    • SHA512

      a09cc3be0cba14a7640a8ec2ea8b0680ca3c53b8b39fdc21a8d2116b6916db3f7fd002ba30f995cf7b99d65a5a6a2ba554fe54715adce172845145f87493b7eb

    • SSDEEP

      24576:bANw2430/i328ab4F+rM/aXq6bJfBUam6:bew2p/i3da1YS6ozB

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks