Overview

overview

7

Static

static

3

2024-06-07...uk.exe

windows7-x64

1

2024-06-07...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-06-07_464f74afa7a30f17bb134e3b502db14c_ryuk

  • Size

    5.5MB

  • Sample

    240607-xh78lsdb36

  • MD5

    464f74afa7a30f17bb134e3b502db14c

  • SHA1

    2b91c4341c837e84d6d510a86ae3a6062b3619ae

  • SHA256

    fb00a091068fe97ad1d073efb24f7b0dd41e69f17cd0dc01350917226196d241

  • SHA512

    7221ecae8b12ff1958cfa1940a97a9fd167f25545f6cbb5ba7ef9060c288a7fca83181a502c01e6c880a8afe4fd047f6a44dd3ff8cd6d4b4cd3d2498504d8b99

  • SSDEEP

    49152:GEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfv:8AI5pAdVJn9tbnR1VgBVm0C17DVqFJU

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-06-07_464f74afa7a30f17bb134e3b502db14c_ryuk

    • Size

      5.5MB

    • MD5

      464f74afa7a30f17bb134e3b502db14c

    • SHA1

      2b91c4341c837e84d6d510a86ae3a6062b3619ae

    • SHA256

      fb00a091068fe97ad1d073efb24f7b0dd41e69f17cd0dc01350917226196d241

    • SHA512

      7221ecae8b12ff1958cfa1940a97a9fd167f25545f6cbb5ba7ef9060c288a7fca83181a502c01e6c880a8afe4fd047f6a44dd3ff8cd6d4b4cd3d2498504d8b99

    • SSDEEP

      49152:GEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfv:8AI5pAdVJn9tbnR1VgBVm0C17DVqFJU

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks