Overview

overview

7

Static

static

3

2024-05-02...uk.exe

windows7-x64

1

2024-05-02...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-02_52cf49b14b9a35863c2d8b7b6e563679_ryuk

  • Size

    5.5MB

  • Sample

    240502-jqdr3scf71

  • MD5

    52cf49b14b9a35863c2d8b7b6e563679

  • SHA1

    af118fb25be937af61774eb39822dfb3649572e5

  • SHA256

    cc76ae9bbcedb5f195a743bfca83b88c6f0bc588b09d7aa38db7f7d90c68f820

  • SHA512

    a17f118ab7ef28157c70c88eaefa39473d9d51bfa31ca84648a5ba57ec25bcf31d9b3f35055a067f48430c94fc6fb86cf5be02d163cc2588c7cda528b2de62e8

  • SSDEEP

    49152:rEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1bn9tJEUxDG0BYYrLA50IHLGfH:3AI5pAdV9n9tbnR1VgBVmel9fimATx

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-05-02_52cf49b14b9a35863c2d8b7b6e563679_ryuk

    • Size

      5.5MB

    • MD5

      52cf49b14b9a35863c2d8b7b6e563679

    • SHA1

      af118fb25be937af61774eb39822dfb3649572e5

    • SHA256

      cc76ae9bbcedb5f195a743bfca83b88c6f0bc588b09d7aa38db7f7d90c68f820

    • SHA512

      a17f118ab7ef28157c70c88eaefa39473d9d51bfa31ca84648a5ba57ec25bcf31d9b3f35055a067f48430c94fc6fb86cf5be02d163cc2588c7cda528b2de62e8

    • SSDEEP

      49152:rEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1bn9tJEUxDG0BYYrLA50IHLGfH:3AI5pAdV9n9tbnR1VgBVmel9fimATx

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks