Overview

overview

7

Static

static

3

2024-04-27...uk.exe

windows7-x64

7

2024-04-27...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-27_4772858936d50000b56c3b4cff5607f3_ryuk

  • Size

    3.7MB

  • Sample

    240427-w6z2gaef3x

  • MD5

    4772858936d50000b56c3b4cff5607f3

  • SHA1

    db993e9dfb9760a39f9d7331e00ca3ad699f9629

  • SHA256

    edbb056bef50a0af7e2bcb7c19bc70eb1eddef09d9ec93b0a9827b449e9044fd

  • SHA512

    c999d912c478b223ccfc86214f07ea13203f7447e6a871d3b2b1f653824af9894ffe3f31ee59c9895870a2f1296aab3c31756bbb3940b3a3db6c41fa4bb41786

  • SSDEEP

    49152:fFg351Jg2TDu3Smqh7U91MWbkujdGXEBj3liyBteB9hFtYdqlMMNPFd1YMGyNNAI:2/Gbk2GXmtdqPPFrYMzYlD527BWG

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-27_4772858936d50000b56c3b4cff5607f3_ryuk

    • Size

      3.7MB

    • MD5

      4772858936d50000b56c3b4cff5607f3

    • SHA1

      db993e9dfb9760a39f9d7331e00ca3ad699f9629

    • SHA256

      edbb056bef50a0af7e2bcb7c19bc70eb1eddef09d9ec93b0a9827b449e9044fd

    • SHA512

      c999d912c478b223ccfc86214f07ea13203f7447e6a871d3b2b1f653824af9894ffe3f31ee59c9895870a2f1296aab3c31756bbb3940b3a3db6c41fa4bb41786

    • SSDEEP

      49152:fFg351Jg2TDu3Smqh7U91MWbkujdGXEBj3liyBteB9hFtYdqlMMNPFd1YMGyNNAI:2/Gbk2GXmtdqPPFrYMzYlD527BWG

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks