Overview

overview

7

Static

static

3

2024-10-15...uk.exe

windows7-x64

7

2024-10-15...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-10-15_4cacc6a43bcb850f6ebd13f0dc3282a0_cobalt-strike_ryuk

  • Size

    3.2MB

  • Sample

    241015-cfrsmaybpe

  • MD5

    4cacc6a43bcb850f6ebd13f0dc3282a0

  • SHA1

    773e764275a7cfe48a99c9d1e763dd691423eccb

  • SHA256

    8ef280355f700a5e10a606931be71bedcd644b068f91a9f35610bd183d1da7ef

  • SHA512

    b676528129bc6f6b72d0300495bca5639aea1a8b79dce35b60a4743605d86b5bddc0ac2395d5d758563992c3bfc2521a9f6554f8b12dd73c4145efc42325e947

  • SSDEEP

    49152:y5k1YCdptya507NUUWn043oHS3fTKYwVq1/xT3DDbw0TUqyVxlMPdlR8v4UC0Egv:MNhSuYw8yXl2/V0cETQ/I

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      2024-10-15_4cacc6a43bcb850f6ebd13f0dc3282a0_cobalt-strike_ryuk

    • Size

      3.2MB

    • MD5

      4cacc6a43bcb850f6ebd13f0dc3282a0

    • SHA1

      773e764275a7cfe48a99c9d1e763dd691423eccb

    • SHA256

      8ef280355f700a5e10a606931be71bedcd644b068f91a9f35610bd183d1da7ef

    • SHA512

      b676528129bc6f6b72d0300495bca5639aea1a8b79dce35b60a4743605d86b5bddc0ac2395d5d758563992c3bfc2521a9f6554f8b12dd73c4145efc42325e947

    • SSDEEP

      49152:y5k1YCdptya507NUUWn043oHS3fTKYwVq1/xT3DDbw0TUqyVxlMPdlR8v4UC0Egv:MNhSuYw8yXl2/V0cETQ/I

    Score
    7/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks