Overview

overview

7

Static

static

3

2024-06-04...uk.exe

windows7-x64

1

2024-06-04...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-04_ab2269089af1ba020bf7e35a38b65aa1_ryuk

  • Size

    2.2MB

  • Sample

    240604-tvy9pacf7y

  • MD5

    ab2269089af1ba020bf7e35a38b65aa1

  • SHA1

    ca451332b11b1824ffed6941fa5b8fdd2380a94d

  • SHA256

    ec80f4be2f5811990e5f00823fc38c63539616c4a2ffad4d69828db8ae6295d9

  • SHA512

    3649078bc322c9df7af8d7e9d409258cbbd9847cb20875e3aff82d8205f99fa01197a77ac15136ecefcbbc286439ecb17948ad1982469acc16bddde8624685a0

  • SSDEEP

    49152:4OOh3aN4kuLbegmtGlksDM2jh3BqS7YtGL/Als:KU4ku/ctp6MMQS7kGLws

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-06-04_ab2269089af1ba020bf7e35a38b65aa1_ryuk

    • Size

      2.2MB

    • MD5

      ab2269089af1ba020bf7e35a38b65aa1

    • SHA1

      ca451332b11b1824ffed6941fa5b8fdd2380a94d

    • SHA256

      ec80f4be2f5811990e5f00823fc38c63539616c4a2ffad4d69828db8ae6295d9

    • SHA512

      3649078bc322c9df7af8d7e9d409258cbbd9847cb20875e3aff82d8205f99fa01197a77ac15136ecefcbbc286439ecb17948ad1982469acc16bddde8624685a0

    • SSDEEP

      49152:4OOh3aN4kuLbegmtGlksDM2jh3BqS7YtGL/Als:KU4ku/ctp6MMQS7kGLws

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks