Overview

overview

7

Static

static

3

2024-04-29...uk.exe

windows7-x64

1

2024-04-29...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-29_7c386324bb7a34606407187c30bfa35d_ryuk

  • Size

    1.7MB

  • Sample

    240429-bsf18aee9y

  • MD5

    7c386324bb7a34606407187c30bfa35d

  • SHA1

    908eef200e210e4218f5f298d307cda5119bc252

  • SHA256

    1472e0ba15a8c1e75bba0c2bc3d9ed10d7c029d76830822efd3397cdcdf95e4b

  • SHA512

    2eab6b7c6a79e7618162774583626a204aadf1ddc22ce04321e9b6ee9254ccaeb8e48d52020a0a22749956d863a355aeda927cd6576a2fd2e6528b4dd10569c2

  • SSDEEP

    24576:0iBE0zqwXeAVmYGsqjnhMgeiCl7G0nehbGZpbD:0e5Xe6XKDmg27RnWGj

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      2024-04-29_7c386324bb7a34606407187c30bfa35d_ryuk

    • Size

      1.7MB

    • MD5

      7c386324bb7a34606407187c30bfa35d

    • SHA1

      908eef200e210e4218f5f298d307cda5119bc252

    • SHA256

      1472e0ba15a8c1e75bba0c2bc3d9ed10d7c029d76830822efd3397cdcdf95e4b

    • SHA512

      2eab6b7c6a79e7618162774583626a204aadf1ddc22ce04321e9b6ee9254ccaeb8e48d52020a0a22749956d863a355aeda927cd6576a2fd2e6528b4dd10569c2

    • SSDEEP

      24576:0iBE0zqwXeAVmYGsqjnhMgeiCl7G0nehbGZpbD:0e5Xe6XKDmg27RnWGj

    Score
    7/10
    persistencespywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Registers COM server for autorun

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks