Overview

overview

7

Static

static

3

2024-04-28...uk.exe

windows7-x64

1

2024-04-28...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-28_d17c0d660848a86a56d20626df6d8e09_ryuk

  • Size

    1.5MB

  • Sample

    240428-egqcasfh5y

  • MD5

    d17c0d660848a86a56d20626df6d8e09

  • SHA1

    87030e53362aa8be29766199e623fa698706de06

  • SHA256

    88ff6250dbd0feaef8f6f229733f2d72f8610bfff0d716fbd4e9affd8fe02379

  • SHA512

    b3f5857dbfab3280404e577f155b28c6196c112af2490072856aceabe995646868f67d66a9db6e2e11158f71c11216d928e3c5f1c74c4c49a84988585768ea42

  • SSDEEP

    12288:aObfA4LWOsvAYFT6Xc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9L:LbL3UT6sqjnhMgeiCl7G0nehbGZpbD

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-28_d17c0d660848a86a56d20626df6d8e09_ryuk

    • Size

      1.5MB

    • MD5

      d17c0d660848a86a56d20626df6d8e09

    • SHA1

      87030e53362aa8be29766199e623fa698706de06

    • SHA256

      88ff6250dbd0feaef8f6f229733f2d72f8610bfff0d716fbd4e9affd8fe02379

    • SHA512

      b3f5857dbfab3280404e577f155b28c6196c112af2490072856aceabe995646868f67d66a9db6e2e11158f71c11216d928e3c5f1c74c4c49a84988585768ea42

    • SSDEEP

      12288:aObfA4LWOsvAYFT6Xc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9L:LbL3UT6sqjnhMgeiCl7G0nehbGZpbD

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks