Overview

overview

7

Static

static

3

2024-08-07...uk.exe

windows7-x64

7

2024-08-07...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-08-07_5c728913623867ead1bc3b50549e0c47_cobalt-strike_ryuk

  • Size

    2.8MB

  • Sample

    240807-ypme6atanq

  • MD5

    5c728913623867ead1bc3b50549e0c47

  • SHA1

    327ec995b6759d3c2072d74c7519d4b0b369677c

  • SHA256

    5c0c75e5150881d568bfdf34dad984a5c10f3b1e816208e6d2bb6858b55917c9

  • SHA512

    5d0746bfe441e3d7d246d61aaf23efb03304ae05bab71a7f1b1d67af1940a5ef66564b76a85065c863060ba5d95dcabb04cc88ce7bd30ce6994f88b68c015efa

  • SSDEEP

    49152:ItbIwL5D4Jc+b01tnAyB63TANQnMEx6Te8wT7Dmg27RnWGj:qkPbiHW6Z4D527BWG

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      2024-08-07_5c728913623867ead1bc3b50549e0c47_cobalt-strike_ryuk

    • Size

      2.8MB

    • MD5

      5c728913623867ead1bc3b50549e0c47

    • SHA1

      327ec995b6759d3c2072d74c7519d4b0b369677c

    • SHA256

      5c0c75e5150881d568bfdf34dad984a5c10f3b1e816208e6d2bb6858b55917c9

    • SHA512

      5d0746bfe441e3d7d246d61aaf23efb03304ae05bab71a7f1b1d67af1940a5ef66564b76a85065c863060ba5d95dcabb04cc88ce7bd30ce6994f88b68c015efa

    • SSDEEP

      49152:ItbIwL5D4Jc+b01tnAyB63TANQnMEx6Te8wT7Dmg27RnWGj:qkPbiHW6Z4D527BWG

    Score
    7/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks