Overview

overview

7

Static

static

3

2024-08-02...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-08-02_0ee14b9e1dbe23cfd204c1aea9ac9e53_cobalt-strike_ryuk

  • Size

    4.5MB

  • Sample

    240802-g52rcazhrp

  • MD5

    0ee14b9e1dbe23cfd204c1aea9ac9e53

  • SHA1

    885423612a7acaf6c3dba0d2fee8e6a2e4058732

  • SHA256

    85ac07eabda12bc6f55e2b1c07ad71e7be42b6e81a1a74c21abe9bd9ceee138a

  • SHA512

    3b08deab355e980e643077af0a57e2a5f06a7b4a95328c3a28f1f0b79c3b9e73374b566347743f5926a0c13cd6707f6fcef3ca11d84522ed67e732c2344db4b2

  • SSDEEP

    49152:L+zV7GWQurl7KS43ktYVsFRnoAX/gsRW0+UH6qMnzohHixayHjJnS+Ze4GTRtDfk:w5cktYVsFRj/3eLHchBtD527BWG

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      2024-08-02_0ee14b9e1dbe23cfd204c1aea9ac9e53_cobalt-strike_ryuk

    • Size

      4.5MB

    • MD5

      0ee14b9e1dbe23cfd204c1aea9ac9e53

    • SHA1

      885423612a7acaf6c3dba0d2fee8e6a2e4058732

    • SHA256

      85ac07eabda12bc6f55e2b1c07ad71e7be42b6e81a1a74c21abe9bd9ceee138a

    • SHA512

      3b08deab355e980e643077af0a57e2a5f06a7b4a95328c3a28f1f0b79c3b9e73374b566347743f5926a0c13cd6707f6fcef3ca11d84522ed67e732c2344db4b2

    • SSDEEP

      49152:L+zV7GWQurl7KS43ktYVsFRnoAX/gsRW0+UH6qMnzohHixayHjJnS+Ze4GTRtDfk:w5cktYVsFRj/3eLHchBtD527BWG

    Score
    7/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks