Overview

overview

7

Static

static

3

2025-07-03...uk.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    103s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250610-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250610-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/07/2025, 03:31

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2025-07-03_f95a4f58f4ba75fc559a961632dca9af_black-basta_luca-stealer_ryuk.exe
  • Size 19.3MB
  • Sample250703-d214vsap21
  • SHA256 cb0c2d35b16caabc66b066c13084d8b40c082c95afd46872f9e2aecf5c69e7fb
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 35 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2025-07-03_f95a4f58f4ba75fc559a961632dca9af_black-basta_luca-stealer_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2025-07-03_f95a4f58f4ba75fc559a961632dca9af_black-basta_luca-stealer_ryuk.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3288
    • C:\Users\Admin\AppData\Local\Temp\2025-07-03_f95a4f58f4ba75fc559a961632dca9af_black-basta_luca-stealer_ryuk.exe
      C:\Users\Admin\AppData\Local\Temp\2025-07-03_f95a4f58f4ba75fc559a961632dca9af_black-basta_luca-stealer_ryuk.exe
      2⤵
      • Loads dropped DLL
      PID:3328

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\_ctypes.pyd
        • Size 120KB
        • SHA256 af598ae52ddc6869f24d36a483b77988385a5bbbf4618b2e2630d89d10a107ee
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _tkinter.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\_tkinter.pyd
        • Size 61KB
        • SHA256 11eb56c4b2e5a5f55eb899a92102d28796ef167f4e077f43cdb110de4093910e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cacert.pem
        • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\certifi\cacert.pem
        • Size 274KB
        • SHA256 b1cdd2d665758ef49d08f40ea13e1a826e5f0412e9e0940c921ed1021464cdc2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _rust.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\cryptography\hazmat\bindings\_rust.pyd
        • Size 8.6MB
        • SHA256 3e5fad46bd63d3c7d88aa385afc187e72aae88d632427da17509cd8fbb6ff197
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libssl-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\libssl-1_1.dll
        • Size 686KB
        • SHA256 2aebb73530d21a2273692a5a3d57235b770daf1c35f60c74e01754a5dac05071
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        tcl86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\tcl86t.dll
        • Size 1.8MB
        • SHA256 a91781fe13548b89817462b00058a75fb0b607ec8ce99d265719ced573ade7b6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        tk86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\tk86t.dll
        • Size 1.5MB
        • SHA256 20139f4c327711baf18289584fa0c8112f7bb3ba55475bded21f3d107672ed94
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _imaging.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3288_133959870694208204\PIL\_imaging.pyd
        • Size 2.2MB
        • SHA256 eaad1713dbcae6191b925a12ce4065de247abbc06b8b1e6b36093b38d8703b29
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _imagingft.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3288_133959870694208204\PIL\_imagingft.pyd
        • Size 1.7MB
        • SHA256 d6d73d8f8c51d17884ee972f39cbb333c3ebf75b769353b0e46ebacf9b3a2609
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3288_133959870694208204\VCRUNTIME140.dll
        • Size 106KB
        • SHA256 76fdb83fde238226b5bebaf3392ee562e2cb7ca8d3ef75983bf5f9d6c7119644
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3288_133959870694208204\_bz2.pyd
        • Size 81KB
        • SHA256 8eecdcc250637652e6babc306ea6b8820e9e835ddd2434816d0e0fd0ca67fd14
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _cffi_backend.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3288_133959870694208204\_cffi_backend.pyd
        • Size 174KB
        • SHA256 9aee90cf7980c8ff694bb3ffe06c71f87eb6a613033f73e3174a732648d39980
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3288_133959870694208204\_hashlib.pyd
        • Size 62KB
        • SHA256 441d32922122e59f75a728cc818f8e50613866a6c3dec627098e6cc6c53624e2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3288_133959870694208204\_lzma.pyd
        • Size 153KB
        • SHA256 33ae42f744d2688bb7d5519f32ff7b7489b96f4eea47f66d2009dba6a0023903
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3288_133959870694208204\_queue.pyd
        • Size 30KB
        • SHA256 39bd456267fe228a505ef4e9c8d28f948dd65123cb4d48b77da51910013fa582
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3288_133959870694208204\_socket.pyd
        • Size 76KB
        • SHA256 360744663fce8dec252abbda1168f470244fdb6da5740bb7ab3171e19106e63c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3288_133959870694208204\_ssl.pyd
        • Size 155KB
        • SHA256 d9cc4358d9351fed11eec03753a8fa8ed981a6c2246bbd7cb0b0a3472c09fdc4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _uuid.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3288_133959870694208204\_uuid.pyd
        • Size 23KB
        • SHA256 d17e20063243a71b4331c7a8902451c6911fd87475ec918633c6388d6155ce52
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _win32sysloader.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3288_133959870694208204\_win32sysloader.pyd
        • Size 14KB
        • SHA256 5a233a01e52ebdda835933bb195e8c9954a27bcfc159bb687dc81526e2c66202
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        md.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3288_133959870694208204\charset_normalizer\md.pyd
        • Size 10KB
        • SHA256 8e2a164f99c43a1a0f162802674b83a93c6a61ace44e370a48c5aaabda1b2828
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        md__mypyc.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3288_133959870694208204\charset_normalizer\md__mypyc.pyd
        • Size 119KB
        • SHA256 d4e3b91ee84fd413aa11ed099e0e9023158aadf4890887944d4a2093407f4512
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        gui.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3288_133959870694208204\gui.dll
        • Size 28.0MB
        • SHA256 d9c290b01117c536edaa3a8b8b6a93e8c0f0f944bee65b22fba229c16fe17279
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libcrypto-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3288_133959870694208204\libcrypto-1_1.dll
        • Size 3.3MB
        • SHA256 976ce72efd0a8aeeb6e21ad441aa9138434314ea07f777432205947cdb149541
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3288_133959870694208204\libffi-8.dll
        • Size 37KB
        • SHA256 68fba9dd89bfad35f8fd657b9af22a8aebda31bffda35058a7f5ae376136e89b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        python3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3288_133959870694208204\python3.dll
        • Size 64KB
        • SHA256 ddd2c77222e2c693ef73d142422d6bf37d6a37deead17e70741b0ac5c9fe095b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        python311.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3288_133959870694208204\python311.dll
        • Size 5.5MB
        • SHA256 aa1e959dcff75a343b448a797d8a5a041eb03b27565a30f70fd081df7a285038
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        pywintypes311.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3288_133959870694208204\pywintypes311.dll
        • Size 132KB
        • SHA256 074a73db77cbd9a8a1eed34dbfeddcea2d5772d34f8761b94957ae463c9a16ae
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3288_133959870694208204\select.pyd
        • Size 28KB
        • SHA256 813eede996fc08e1c9a6d45aaa4cbae1e82e781d69885680a358b4d818cfc0d4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cp1252.enc
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3288_133959870694208204\tcl\encoding\cp1252.enc
        • Size 1KB
        • SHA256 741859cf238c3a63bbb20ec6ed51e46451372bb221cfff438297d261d0561c2e
        • MD5 SHA1 SHA512
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3288_133959870694208204\unicodedata.pyd
        • Size 1.1MB
        • SHA256 175c4cb528f1ac4e285c575cc3f5e85ec4b3ae88860210b5d795b580c7f0b5d9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        vcruntime140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3288_133959870694208204\vcruntime140_1.dll
        • Size 48KB
        • SHA256 e0b66601cc28ecb171c3d4b7ac690c667f47da6b6183bff80604c84c00d265ab
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        backend_c.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3288_133959870694208204\zstandard\backend_c.pyd
        • Size 507KB
        • SHA256 6ab611c4a24406d9d97f09d49d50142ab2734b69a2b0d9ea6489e4af90c4a2a4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download