General
- Target 2025-07-02_abf0213dc29e2d4a4f1574048d5cf0a0_black-basta_ryuk
- Size 950KB
- Sample250702-e2yjeassdz
- SHA256 20750ea2da1c09b4437d66eaa2b633ff3ccf572946f9be888d226f2dc10fc77d
- MD5 abf0213dc29e2d4a4f1574048d5cf0a0
- SHA1 2031b5df6c62b730c6b0a49fe567021ac61253e3
- SHA512 2f9ffbbec8b4e5333b490a03ad99812d8182f7cc9f3552a4e8e2d53488b83fd7683a0e54f3e193281f3662086bfb067a0b740a08d88d7c8ed39e55e691f6d2e7
- SSDEEP 12288:V1MKv/gcgZwdVCHGYj0Dm7Yn/3z+5HNyFxlJzWDR7DZYgzNR26TN3zsqPCZ:VmGXpdG093z+ZaVWNl328NjOZ
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2025-07-02_abf0213dc29e2d4a4f1574048d5cf0a0_black-basta_ryuk.exe
Resource
win10v2004-20250502-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2025-07-02_abf0213dc29e2d4a4f1574048d5cf0a0_black-basta_ryuk
- Size 950KB
- SHA256 20750ea2da1c09b4437d66eaa2b633ff3ccf572946f9be888d226f2dc10fc77d
- MD5 abf0213dc29e2d4a4f1574048d5cf0a0
- SHA1 2031b5df6c62b730c6b0a49fe567021ac61253e3
- SHA512 2f9ffbbec8b4e5333b490a03ad99812d8182f7cc9f3552a4e8e2d53488b83fd7683a0e54f3e193281f3662086bfb067a0b740a08d88d7c8ed39e55e691f6d2e7
- SSDEEP 12288:V1MKv/gcgZwdVCHGYj0Dm7Yn/3z+5HNyFxlJzWDR7DZYgzNR26TN3zsqPCZ:VmGXpdG093z+ZaVWNl328NjOZ
- MD5 SHA1 SHA512 SSDEEP
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1