Overview

overview

7

Static

static

3

2024-09-21...uk.exe

windows7-x64

7

2024-09-21...uk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-21_ee9fa748e01c65b519926a27ad8b7f4f_cobalt-strike_hijackloader_ryuk

  • Size

    14.9MB

  • Sample

    240921-yjb28szdph

  • MD5

    ee9fa748e01c65b519926a27ad8b7f4f

  • SHA1

    9ecf8464a180d5a2b1cc36064eecf45bd0603057

  • SHA256

    c150d7ef9c7fd6dcee083f740f99892f58e98343085f0a5dba568a2df3b38d12

  • SHA512

    ed75155bc3be87a6357858eac6006a9495aef6c34ace857f74ad31a1b5b1037826dcfdfb3686a265d034c2341e11da22124dcf8516197c2dc902cc8e3cbd3bf2

  • SSDEEP

    196608:b7APUNNECwHrc8u3x3AEcq/fByuKlWH3CTou+VQBWG:baUvQHrc8u3xXJ/f4uUWHGB

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      2024-09-21_ee9fa748e01c65b519926a27ad8b7f4f_cobalt-strike_hijackloader_ryuk

    • Size

      14.9MB

    • MD5

      ee9fa748e01c65b519926a27ad8b7f4f

    • SHA1

      9ecf8464a180d5a2b1cc36064eecf45bd0603057

    • SHA256

      c150d7ef9c7fd6dcee083f740f99892f58e98343085f0a5dba568a2df3b38d12

    • SHA512

      ed75155bc3be87a6357858eac6006a9495aef6c34ace857f74ad31a1b5b1037826dcfdfb3686a265d034c2341e11da22124dcf8516197c2dc902cc8e3cbd3bf2

    • SSDEEP

      196608:b7APUNNECwHrc8u3x3AEcq/fByuKlWH3CTou+VQBWG:baUvQHrc8u3xXJ/f4uUWHGB

    Score
    7/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks