Overview

overview

7

Static

static

3

2024-04-29...uk.exe

windows7-x64

1

2024-04-29...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-29_fcdfd16ad1fe34433f41aef487b03f1b_ryuk

  • Size

    5.5MB

  • Sample

    240429-zra1ksca25

  • MD5

    fcdfd16ad1fe34433f41aef487b03f1b

  • SHA1

    f9d90121a693b16117fe162917d202bc4c949400

  • SHA256

    b3ee556d0b23a5258263ba8a2dcdcf9b8ce0221a992bbad8397a2764115e3fc7

  • SHA512

    c002f251bada5c4c567e9c27debcce2f511c605202f93fa2056b6c06d3c948ae400a2780aeb5ff0c42bd65d5d6c46b45661a17b6b58297819f985e4a11f71c0e

  • SSDEEP

    98304:VAI5pAdVJn9tbnR1VgBVmPYjQHiqPtXBeIM:VAsCh7XYoYjVqPdBeI

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-29_fcdfd16ad1fe34433f41aef487b03f1b_ryuk

    • Size

      5.5MB

    • MD5

      fcdfd16ad1fe34433f41aef487b03f1b

    • SHA1

      f9d90121a693b16117fe162917d202bc4c949400

    • SHA256

      b3ee556d0b23a5258263ba8a2dcdcf9b8ce0221a992bbad8397a2764115e3fc7

    • SHA512

      c002f251bada5c4c567e9c27debcce2f511c605202f93fa2056b6c06d3c948ae400a2780aeb5ff0c42bd65d5d6c46b45661a17b6b58297819f985e4a11f71c0e

    • SSDEEP

      98304:VAI5pAdVJn9tbnR1VgBVmPYjQHiqPtXBeIM:VAsCh7XYoYjVqPdBeI

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks