Overview

overview

7

Static

static

3

2024-05-20...uk.exe

windows7-x64

1

2024-05-20...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-20_426492f76caf6b71671343ee893dc16b_ryuk

  • Size

    5.5MB

  • Sample

    240520-r5ea6afa7s

  • MD5

    426492f76caf6b71671343ee893dc16b

  • SHA1

    ee1b8d648a5abb3ff9b236adc0fca3d8d278590f

  • SHA256

    693fa7e75fafaf9b1e5d75453e209089ddb7b7aa429525a8390ff222c2ba6e63

  • SHA512

    258a4d26f8e6b6c3702dfbbb0e542d4b3c79f887400dfccc1a8c8210dc0002f8d985ffc96fbdd2b19b8be4a5ec0f69c8c3b41f2f681a11fdadb8c814c5b45787

  • SSDEEP

    49152:kEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGf1:CAI5pAdVJn9tbnR1VgBVmSTjYvH

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-05-20_426492f76caf6b71671343ee893dc16b_ryuk

    • Size

      5.5MB

    • MD5

      426492f76caf6b71671343ee893dc16b

    • SHA1

      ee1b8d648a5abb3ff9b236adc0fca3d8d278590f

    • SHA256

      693fa7e75fafaf9b1e5d75453e209089ddb7b7aa429525a8390ff222c2ba6e63

    • SHA512

      258a4d26f8e6b6c3702dfbbb0e542d4b3c79f887400dfccc1a8c8210dc0002f8d985ffc96fbdd2b19b8be4a5ec0f69c8c3b41f2f681a11fdadb8c814c5b45787

    • SSDEEP

      49152:kEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGf1:CAI5pAdVJn9tbnR1VgBVmSTjYvH

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks