Overview

overview

7

Static

static

3

2024-05-22...uk.exe

windows7-x64

1

2024-05-22...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-22_5bc6b452eecaef05bb2eb66af2efea0b_ryuk

  • Size

    5.5MB

  • Sample

    240522-qqpynsda98

  • MD5

    5bc6b452eecaef05bb2eb66af2efea0b

  • SHA1

    22c2636d28905aadb23670607f2b3ad4ec0a9911

  • SHA256

    9d3d404c0569cd03f88a154944abfd2562c3a75837bdd7f99b9c62ba491daf56

  • SHA512

    9df4ef71e6f15237be1dfdede3e79399de4c2d5e18213c4e8f37f22981ae40c10360a381e6eda06c41b98a39c265f7026f63e12df6b6b54fe912f5e69adc013f

  • SSDEEP

    49152:TEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfe:PAI5pAdVJn9tbnR1VgBVmu8t4C7

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-05-22_5bc6b452eecaef05bb2eb66af2efea0b_ryuk

    • Size

      5.5MB

    • MD5

      5bc6b452eecaef05bb2eb66af2efea0b

    • SHA1

      22c2636d28905aadb23670607f2b3ad4ec0a9911

    • SHA256

      9d3d404c0569cd03f88a154944abfd2562c3a75837bdd7f99b9c62ba491daf56

    • SHA512

      9df4ef71e6f15237be1dfdede3e79399de4c2d5e18213c4e8f37f22981ae40c10360a381e6eda06c41b98a39c265f7026f63e12df6b6b54fe912f5e69adc013f

    • SSDEEP

      49152:TEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfe:PAI5pAdVJn9tbnR1VgBVmu8t4C7

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks