Overview

overview

7

Static

static

3

2024-08-03...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-08-03_1a019816742a1b3003a1618f75691a7d_cobalt-strike_ryuk

  • Size

    4.5MB

  • Sample

    240803-jbt6hs1epg

  • MD5

    1a019816742a1b3003a1618f75691a7d

  • SHA1

    e415aa743556a413656f19ccdb909d6806ffc874

  • SHA256

    0ad4082f922226d37b57bb4dafaf0f87628165c948fe0867f8c2281f285b6f16

  • SHA512

    ab47de6653d4a323c354510c2a02764f8d83c519f3325f210bec16c0970e94386c599a14c90faa78409563dfbc80563a54e4ceaf2e06db34761f125f5a960807

  • SSDEEP

    49152:T+zV7GWQurl7KS43ktY8sFRnoAX/gsRW0+UH6qMnzohHixayHjJnS+Ze4GTRtDfO:45cktY8sFRj/3eLHchBR7AFp7lb

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      2024-08-03_1a019816742a1b3003a1618f75691a7d_cobalt-strike_ryuk

    • Size

      4.5MB

    • MD5

      1a019816742a1b3003a1618f75691a7d

    • SHA1

      e415aa743556a413656f19ccdb909d6806ffc874

    • SHA256

      0ad4082f922226d37b57bb4dafaf0f87628165c948fe0867f8c2281f285b6f16

    • SHA512

      ab47de6653d4a323c354510c2a02764f8d83c519f3325f210bec16c0970e94386c599a14c90faa78409563dfbc80563a54e4ceaf2e06db34761f125f5a960807

    • SSDEEP

      49152:T+zV7GWQurl7KS43ktY8sFRnoAX/gsRW0+UH6qMnzohHixayHjJnS+Ze4GTRtDfO:45cktY8sFRj/3eLHchBR7AFp7lb

    Score
    7/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks