Overview

overview

7

Static

static

3

2024-04-28...uk.exe

windows7-x64

1

2024-04-28...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-28_5cd32a71d2833cdfcab6dfa72d30ce6f_ryuk

  • Size

    5.5MB

  • Sample

    240428-nqlj5seg39

  • MD5

    5cd32a71d2833cdfcab6dfa72d30ce6f

  • SHA1

    597a6d7fcc415d0bb5df6e15cfe20596586ac2f7

  • SHA256

    a4d5fea49712cc2f382f83a84d0cf37506d85366a51f678a694507165ff22c56

  • SHA512

    0a8f77ca856651e75210a299970827ab181eeb0e10852b1dff9a05d742bc621f283081a3ba9d161e749f2123a1727604dba7d71c632324df0345e062da1a6202

  • SSDEEP

    98304:dAI5pAdV9n9tbnR1VgBVmC70uMhSBrkNq:dAsC97XYZIoQ

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-28_5cd32a71d2833cdfcab6dfa72d30ce6f_ryuk

    • Size

      5.5MB

    • MD5

      5cd32a71d2833cdfcab6dfa72d30ce6f

    • SHA1

      597a6d7fcc415d0bb5df6e15cfe20596586ac2f7

    • SHA256

      a4d5fea49712cc2f382f83a84d0cf37506d85366a51f678a694507165ff22c56

    • SHA512

      0a8f77ca856651e75210a299970827ab181eeb0e10852b1dff9a05d742bc621f283081a3ba9d161e749f2123a1727604dba7d71c632324df0345e062da1a6202

    • SSDEEP

      98304:dAI5pAdV9n9tbnR1VgBVmC70uMhSBrkNq:dAsC97XYZIoQ

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks