Overview

overview

7

Static

static

3

2024-04-26...uk.exe

windows7-x64

1

2024-04-26...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-26_074df308c5c76dd3645e3daebb03c293_ryuk

  • Size

    5.5MB

  • Sample

    240426-rb5k9adb49

  • MD5

    074df308c5c76dd3645e3daebb03c293

  • SHA1

    3badc88d3e32a0fdf20e0231a1ab878ac031333e

  • SHA256

    f987d474ab3ceed133b050b6eef1bf36b35d9ce5bc0eb2095231495daf9745cd

  • SHA512

    fa800c23f5edea051cb45d63d6080ab4d3ce799f7dd3cebe1b6d6f6fba3585e56d0369a3477fbf8efb29501086cade36ab65572ba3525ce6e137da059092adee

  • SSDEEP

    98304:LAI5pAdV9n9tbnR1VgBVmzRepUUN5I9+n3:LAsC97XY+IR69+3

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-26_074df308c5c76dd3645e3daebb03c293_ryuk

    • Size

      5.5MB

    • MD5

      074df308c5c76dd3645e3daebb03c293

    • SHA1

      3badc88d3e32a0fdf20e0231a1ab878ac031333e

    • SHA256

      f987d474ab3ceed133b050b6eef1bf36b35d9ce5bc0eb2095231495daf9745cd

    • SHA512

      fa800c23f5edea051cb45d63d6080ab4d3ce799f7dd3cebe1b6d6f6fba3585e56d0369a3477fbf8efb29501086cade36ab65572ba3525ce6e137da059092adee

    • SSDEEP

      98304:LAI5pAdV9n9tbnR1VgBVmzRepUUN5I9+n3:LAsC97XY+IR69+3

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks