30f4363538db5730f430c4eefb0bce69f5ee8a155fe42673b7bc8968fa232270 | Triage

Submit
Reports

Overview

overview

7

Static

static

3

2024-07-04...uk.exe

windows7-x64

1

2024-07-04...uk.exe

windows10-2004-x64

7

Sharing

General

Target

2024-07-04_299a7a920e7887c576dc72ce5bc3f24f_ryuk
Size

940KB
Sample

240704-lftfwstgrr
MD5

299a7a920e7887c576dc72ce5bc3f24f
SHA1

677ba47172ae37c78763314f84ff1517dafc6c2a
SHA256

30f4363538db5730f430c4eefb0bce69f5ee8a155fe42673b7bc8968fa232270
SHA512

a9cdc4b4e74b0680563b9f90ab27767c5fcdee3f5210498195ce4f3f887bc91b5932fb54bd3028189cc6c785886cb64ee3dd0e329a6de29b6fbf47c450bca5e4
SSDEEP

12288:WOb9A4LWOsvAYFTwGt/sB1KcYmqgZvAMlUoUjG+YKtMfnkOeZb5JYiNAgAPh:/pL3UT3t/sBlDqgZQd6XKtiMJYiPU

Score

7^/10

spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2024-07-04_299a7a920e7887c576dc72ce5bc3f24f_ryuk.exe

Resource

win7-20240419-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

2024-07-04_299a7a920e7887c576dc72ce5bc3f24f_ryuk.exe

Resource

win10v2004-20240508-en

spyware stealer

windows10-2004-x64

14 signatures

150 seconds

Malware Config

Targets

- Target
  
  2024-07-04_299a7a920e7887c576dc72ce5bc3f24f_ryuk
- Size
  
  940KB
- MD5
  
  299a7a920e7887c576dc72ce5bc3f24f
- SHA1
  
  677ba47172ae37c78763314f84ff1517dafc6c2a
- SHA256
  
  30f4363538db5730f430c4eefb0bce69f5ee8a155fe42673b7bc8968fa232270
- SHA512
  
  a9cdc4b4e74b0680563b9f90ab27767c5fcdee3f5210498195ce4f3f887bc91b5932fb54bd3028189cc6c785886cb64ee3dd0e329a6de29b6fbf47c450bca5e4
- SSDEEP
  
  12288:WOb9A4LWOsvAYFTwGt/sB1KcYmqgZvAMlUoUjG+YKtMfnkOeZb5JYiNAgAPh:/pL3UT3t/sBlDqgZQd6XKtiMJYiPU
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.