Overview

overview

7

Static

static

3

2024-06-15...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-15_a321fde0816d50950e48f18b014b0de8_ryuk

  • Size

    4.6MB

  • Sample

    240615-rxprxstfjf

  • MD5

    a321fde0816d50950e48f18b014b0de8

  • SHA1

    109ce75f4a9bc4d19d71fff7c1519e187d91f84f

  • SHA256

    e01c6734e5072861cfa000b82ed11b3297f1e796b3f82195d3801b2d83788a77

  • SHA512

    31fa235ce88568028dc9c8cb0c0ed28afcfc8e4021c2a85b0ad7cd2a7bd3c01ff8adc58d1a9e6840c140937d5cb253a06673764d713d3a3527b4b4b52b27a30c

  • SSDEEP

    49152:+3Ncw4INSd5Lk6iKpssiMQIYB3Dpd84n8zonABGRzaDh0QAOnLSNQUo6VuoQDmgo:EGixpMQIYB3dZqLOcD527BWG

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      2024-06-15_a321fde0816d50950e48f18b014b0de8_ryuk

    • Size

      4.6MB

    • MD5

      a321fde0816d50950e48f18b014b0de8

    • SHA1

      109ce75f4a9bc4d19d71fff7c1519e187d91f84f

    • SHA256

      e01c6734e5072861cfa000b82ed11b3297f1e796b3f82195d3801b2d83788a77

    • SHA512

      31fa235ce88568028dc9c8cb0c0ed28afcfc8e4021c2a85b0ad7cd2a7bd3c01ff8adc58d1a9e6840c140937d5cb253a06673764d713d3a3527b4b4b52b27a30c

    • SSDEEP

      49152:+3Ncw4INSd5Lk6iKpssiMQIYB3Dpd84n8zonABGRzaDh0QAOnLSNQUo6VuoQDmgo:EGixpMQIYB3dZqLOcD527BWG

    Score
    7/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks