Overview

overview

7

Static

static

3

2024-05-21...uk.exe

windows7-x64

1

2024-05-21...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-21_02ae4ca8533471644d14f14f7c4e0aa2_ryuk

  • Size

    5.5MB

  • Sample

    240521-twxr9abg4y

  • MD5

    02ae4ca8533471644d14f14f7c4e0aa2

  • SHA1

    9fdc1ce04bfd37554219bd5ac021ac9336669f37

  • SHA256

    31f472731dbfaacb7dcc089e269b8bf45b04795f6ee16b78ab68560e62594469

  • SHA512

    59342d656f49c4007ef1794990f7e0eae2eedb3c5ce4d87dd57da5defb74ef5957f20cd0eef98357e2ed96f1998d11f51ab212a38456d626dc62a30b7f351f80

  • SSDEEP

    49152:vEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1bn9tJEUxDG0BYYrLA50IHLGf4:LAI5pAdV9n9tbnR1VgBVmeQWdO

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-05-21_02ae4ca8533471644d14f14f7c4e0aa2_ryuk

    • Size

      5.5MB

    • MD5

      02ae4ca8533471644d14f14f7c4e0aa2

    • SHA1

      9fdc1ce04bfd37554219bd5ac021ac9336669f37

    • SHA256

      31f472731dbfaacb7dcc089e269b8bf45b04795f6ee16b78ab68560e62594469

    • SHA512

      59342d656f49c4007ef1794990f7e0eae2eedb3c5ce4d87dd57da5defb74ef5957f20cd0eef98357e2ed96f1998d11f51ab212a38456d626dc62a30b7f351f80

    • SSDEEP

      49152:vEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1bn9tJEUxDG0BYYrLA50IHLGf4:LAI5pAdV9n9tbnR1VgBVmeQWdO

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks