Overview

overview

7

Static

static

3

2024-08-12...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-08-12_dd9f42c827eac843e81f020e2cc3d424_cobalt-strike_ryuk

  • Size

    4.6MB

  • Sample

    240812-pvatwavhpg

  • MD5

    dd9f42c827eac843e81f020e2cc3d424

  • SHA1

    1b0b3305b64738898163180c3b88a8a84de54f53

  • SHA256

    170c34b59bd165849c5a6b4087a4df7d052b421c7e0f4969496c6dfb3b636309

  • SHA512

    c920c32598e8e122d5e2e22e969a9251e1f341dbecff82639554bf4970ce9c9a9f1ec4b21422257fdb58303e053bc4a19b5a7ffd5ccd2de3f8819f7bb85524ef

  • SSDEEP

    49152:JndPjazwYcCOlBWD9rqGfi0iIGTHI6DOnIIeNxu6xl1aZt6m5xbzDI6bpsRJrAGS:V2D86iFIIm3Gob5iE6E3Xc

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      2024-08-12_dd9f42c827eac843e81f020e2cc3d424_cobalt-strike_ryuk

    • Size

      4.6MB

    • MD5

      dd9f42c827eac843e81f020e2cc3d424

    • SHA1

      1b0b3305b64738898163180c3b88a8a84de54f53

    • SHA256

      170c34b59bd165849c5a6b4087a4df7d052b421c7e0f4969496c6dfb3b636309

    • SHA512

      c920c32598e8e122d5e2e22e969a9251e1f341dbecff82639554bf4970ce9c9a9f1ec4b21422257fdb58303e053bc4a19b5a7ffd5ccd2de3f8819f7bb85524ef

    • SSDEEP

      49152:JndPjazwYcCOlBWD9rqGfi0iIGTHI6DOnIIeNxu6xl1aZt6m5xbzDI6bpsRJrAGS:V2D86iFIIm3Gob5iE6E3Xc

    Score
    7/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks