Overview

overview

7

Static

static

3

2024-04-30...uk.exe

windows7-x64

7

2024-04-30...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-30_0c178c7ddeec5118e0e7727a19ae3b92_ryuk

  • Size

    1.1MB

  • Sample

    240430-s7ha9sac5t

  • MD5

    0c178c7ddeec5118e0e7727a19ae3b92

  • SHA1

    e5527376a24cdd87f0d9b3eccedfcc3d552ca02f

  • SHA256

    60cb8ecbcc8eac8624d8c89e766f547ae2f732a52c0296541605c51f0e68c744

  • SHA512

    698917ef9f051f843205693b4e7e667b4985ccc53b76c790feaa89e3959a1535ba01279d9b2980e71967a84439f7cbc1e5f92c69e79dac7d2ca51a2372a36815

  • SSDEEP

    24576:WSi1SoCU5qJSr1eWPSCsP0MugC6eTJX7bHsMQ4/O6yMLprOInyT/Swl8Mi9:GS7PLjeTJXvYMLprznyDSga9

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-30_0c178c7ddeec5118e0e7727a19ae3b92_ryuk

    • Size

      1.1MB

    • MD5

      0c178c7ddeec5118e0e7727a19ae3b92

    • SHA1

      e5527376a24cdd87f0d9b3eccedfcc3d552ca02f

    • SHA256

      60cb8ecbcc8eac8624d8c89e766f547ae2f732a52c0296541605c51f0e68c744

    • SHA512

      698917ef9f051f843205693b4e7e667b4985ccc53b76c790feaa89e3959a1535ba01279d9b2980e71967a84439f7cbc1e5f92c69e79dac7d2ca51a2372a36815

    • SSDEEP

      24576:WSi1SoCU5qJSr1eWPSCsP0MugC6eTJX7bHsMQ4/O6yMLprOInyT/Swl8Mi9:GS7PLjeTJXvYMLprznyDSga9

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks