Overview

overview

7

Static

static

3

2024-08-25...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-08-25_a173a1996e4ce1df7e97c5e27872d3a0_cobalt-strike_ryuk

  • Size

    4.6MB

  • Sample

    240825-cntxysscnh

  • MD5

    a173a1996e4ce1df7e97c5e27872d3a0

  • SHA1

    4f5cad080457efe757f26a7bbbc9c30c877dac6e

  • SHA256

    6f020d261393418ffef2fc854c59fd8574ce5b691849806167df4d790c769546

  • SHA512

    1f83c4e81743aece6b6ebd0cd78ef57f42f783d1e6240b9371677726d311177f4594a16d90bb2ebeb48bd1bb96fcf09567b7831744f3e3d98ad9971345039082

  • SSDEEP

    49152:WyEKQ5E3ieGR0PEtBFUow1b89eX61o+2xmepn/TRijbqYW3qkCbDypSfe6qwiXER:Iq9ceqC+2xl/SSay1EnW6at

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      2024-08-25_a173a1996e4ce1df7e97c5e27872d3a0_cobalt-strike_ryuk

    • Size

      4.6MB

    • MD5

      a173a1996e4ce1df7e97c5e27872d3a0

    • SHA1

      4f5cad080457efe757f26a7bbbc9c30c877dac6e

    • SHA256

      6f020d261393418ffef2fc854c59fd8574ce5b691849806167df4d790c769546

    • SHA512

      1f83c4e81743aece6b6ebd0cd78ef57f42f783d1e6240b9371677726d311177f4594a16d90bb2ebeb48bd1bb96fcf09567b7831744f3e3d98ad9971345039082

    • SSDEEP

      49152:WyEKQ5E3ieGR0PEtBFUow1b89eX61o+2xmepn/TRijbqYW3qkCbDypSfe6qwiXER:Iq9ceqC+2xl/SSay1EnW6at

    Score
    7/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks