Overview

overview

7

Static

static

3

2024-08-05...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-08-05_2a434b7f96104f5818f7446bdee468c1_cobalt-strike_ryuk

  • Size

    4.5MB

  • Sample

    240805-t9wgcasbqn

  • MD5

    2a434b7f96104f5818f7446bdee468c1

  • SHA1

    b94d0849175bf91099ee707d1dc9bc9093389d3c

  • SHA256

    75c97b55b7f02b1615c9f9808416b783903db03865e0355f24189f5cb7670bc3

  • SHA512

    d07fc4ebd4896944082f624a7bcd0c8bb8a0607178240035a45d885a759dfcf9ea3be2e499a6f14642667575e195ab9c04bf8469d7fd814da4c22fc4ff7b22b3

  • SSDEEP

    49152:1+zV7GWQurl7KS43ktY8sFRnoAX/gsRW0+UH6qMnzohHixayHjJnS+Ze4GTRSYfv:65cktY8sFRj/3eLHchuGfv0

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      2024-08-05_2a434b7f96104f5818f7446bdee468c1_cobalt-strike_ryuk

    • Size

      4.5MB

    • MD5

      2a434b7f96104f5818f7446bdee468c1

    • SHA1

      b94d0849175bf91099ee707d1dc9bc9093389d3c

    • SHA256

      75c97b55b7f02b1615c9f9808416b783903db03865e0355f24189f5cb7670bc3

    • SHA512

      d07fc4ebd4896944082f624a7bcd0c8bb8a0607178240035a45d885a759dfcf9ea3be2e499a6f14642667575e195ab9c04bf8469d7fd814da4c22fc4ff7b22b3

    • SSDEEP

      49152:1+zV7GWQurl7KS43ktY8sFRnoAX/gsRW0+UH6qMnzohHixayHjJnS+Ze4GTRSYfv:65cktY8sFRj/3eLHchuGfv0

    Score
    7/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks