Overview

overview

7

Static

static

3

2024-08-08...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-08-08_a95d7b0ff0d9471c9c88b6f13cc7b404_cobalt-strike_ryuk

  • Size

    4.5MB

  • Sample

    240808-rpjwpsvckl

  • MD5

    a95d7b0ff0d9471c9c88b6f13cc7b404

  • SHA1

    6ef4a771258fdd953a20907d780854d72515ed25

  • SHA256

    5623dcd3bab37285a26e97ac18ffab5444e06a256283eed74cf1d7267ed2da8b

  • SHA512

    7f0318f6398de3fdf32e376f8036e909a1164189ca6a6447071d809771378ed1c327433ff2731fb2c4e43929de3d3bc515125ea3b0f352f50f32b16bfc8c32a7

  • SSDEEP

    49152:b+zV7GWhurl7KS43ktYEsFRnoAXWgsuW0+UH6qMnzohHixayHjJnS+Ze4GTRnR2x:V5cktYEsFRjWgeLHchrj6MMQS7kGLws

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      2024-08-08_a95d7b0ff0d9471c9c88b6f13cc7b404_cobalt-strike_ryuk

    • Size

      4.5MB

    • MD5

      a95d7b0ff0d9471c9c88b6f13cc7b404

    • SHA1

      6ef4a771258fdd953a20907d780854d72515ed25

    • SHA256

      5623dcd3bab37285a26e97ac18ffab5444e06a256283eed74cf1d7267ed2da8b

    • SHA512

      7f0318f6398de3fdf32e376f8036e909a1164189ca6a6447071d809771378ed1c327433ff2731fb2c4e43929de3d3bc515125ea3b0f352f50f32b16bfc8c32a7

    • SSDEEP

      49152:b+zV7GWhurl7KS43ktYEsFRnoAXWgsuW0+UH6qMnzohHixayHjJnS+Ze4GTRnR2x:V5cktYEsFRjWgeLHchrj6MMQS7kGLws

    Score
    7/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks