General

  • Target

    2024-04-28_8ed7738500823783cef23fc9fdc66dbc_ryuk

  • Size

    2.2MB

  • Sample

    240428-mhg2badh8v

  • MD5

    8ed7738500823783cef23fc9fdc66dbc

  • SHA1

    f840200b329c8c305cfb5e330bfb71b8ecf5635f

  • SHA256

    fb743b43ddb33efce342c841ec4f59b1cbbd8171909b3668110f3d4c05df6129

  • SHA512

    3709b4cadc2b9b3b02bf431c2c12633fbcae82dcd5a0c35e125e3b004a2a1061670f6fb605b887153c371338dfe04c3d3825a4816c4373fa4d983967c77eabee

  • SSDEEP

    24576:7OObVw4TaN1wdkukCba4oXtgLhU3wEdmh58dERIk1k7c+vDqGJAAg:7OOh3aN4kuLbegmtGbIk8x77AA

Score
7/10

Malware Config

Targets

    • Target

      2024-04-28_8ed7738500823783cef23fc9fdc66dbc_ryuk

    • Size

      2.2MB

    • MD5

      8ed7738500823783cef23fc9fdc66dbc

    • SHA1

      f840200b329c8c305cfb5e330bfb71b8ecf5635f

    • SHA256

      fb743b43ddb33efce342c841ec4f59b1cbbd8171909b3668110f3d4c05df6129

    • SHA512

      3709b4cadc2b9b3b02bf431c2c12633fbcae82dcd5a0c35e125e3b004a2a1061670f6fb605b887153c371338dfe04c3d3825a4816c4373fa4d983967c77eabee

    • SSDEEP

      24576:7OObVw4TaN1wdkukCba4oXtgLhU3wEdmh58dERIk1k7c+vDqGJAAg:7OOh3aN4kuLbegmtGbIk8x77AA

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks