Overview

overview

7

Static

static

3

2024-08-28...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-08-28_8f3c7b927c5176eb4a7368319a1ec46f_cobalt-strike_ryuk

  • Size

    1.8MB

  • Sample

    240828-v6ymzazekj

  • MD5

    8f3c7b927c5176eb4a7368319a1ec46f

  • SHA1

    06a13d236c5718a5e9cdb248fdb89bcb646a6d0d

  • SHA256

    940e839eaa4cfba23236bd8b31390dcb443421bda15950f431a9b04a6eb9db19

  • SHA512

    b0a24ebe520d9c87b09726f7d4898d01ec6c3bd8a16e54720a08a18ed217bd078f5597410d867d531af07e1322fa56435806a9c0acc2e52422277496621692a2

  • SSDEEP

    49152:5Rr+6O+t8EqlT+fecda5V9z3fh4jX565:CGt8E2T5V53p4jX

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      2024-08-28_8f3c7b927c5176eb4a7368319a1ec46f_cobalt-strike_ryuk

    • Size

      1.8MB

    • MD5

      8f3c7b927c5176eb4a7368319a1ec46f

    • SHA1

      06a13d236c5718a5e9cdb248fdb89bcb646a6d0d

    • SHA256

      940e839eaa4cfba23236bd8b31390dcb443421bda15950f431a9b04a6eb9db19

    • SHA512

      b0a24ebe520d9c87b09726f7d4898d01ec6c3bd8a16e54720a08a18ed217bd078f5597410d867d531af07e1322fa56435806a9c0acc2e52422277496621692a2

    • SSDEEP

      49152:5Rr+6O+t8EqlT+fecda5V9z3fh4jX565:CGt8E2T5V53p4jX

    Score
    7/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks