Overview

overview

7

Static

static

3

2024-04-27...uk.exe

windows7-x64

1

2024-04-27...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-27_a85eda0a7c80d3cf2b84a06829a72818_ryuk

  • Size

    2.2MB

  • Sample

    240427-2kxbcaab63

  • MD5

    a85eda0a7c80d3cf2b84a06829a72818

  • SHA1

    23e87edefbf920fe81d5a7495bb4769648644b72

  • SHA256

    76a3d329e320ce58f230f4c07a5f04940ee2177a8b8a70c7a129704d7ed50abe

  • SHA512

    baf8b589a42b24c2b42747118268a66c0bc5d59c70ae3ae943be2c6405ffa8242cbf2732918381fca1a3397deb37bfa62702964fcf485adea57910dea584ff51

  • SSDEEP

    24576:+OObVw4TaN1wdkukCba4oXtgLhU3wEdmh58GDVv7DxAZquHPH9k:+OOh3aN4kuLbegmtGRzDOQ0K

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-27_a85eda0a7c80d3cf2b84a06829a72818_ryuk

    • Size

      2.2MB

    • MD5

      a85eda0a7c80d3cf2b84a06829a72818

    • SHA1

      23e87edefbf920fe81d5a7495bb4769648644b72

    • SHA256

      76a3d329e320ce58f230f4c07a5f04940ee2177a8b8a70c7a129704d7ed50abe

    • SHA512

      baf8b589a42b24c2b42747118268a66c0bc5d59c70ae3ae943be2c6405ffa8242cbf2732918381fca1a3397deb37bfa62702964fcf485adea57910dea584ff51

    • SSDEEP

      24576:+OObVw4TaN1wdkukCba4oXtgLhU3wEdmh58GDVv7DxAZquHPH9k:+OOh3aN4kuLbegmtGRzDOQ0K

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks