General

  • Target

    2024-04-28_499fae01b3b8e6076e712d001b7ae7d5_ryuk

  • Size

    5.3MB

  • Sample

    240428-syqahsah27

  • MD5

    499fae01b3b8e6076e712d001b7ae7d5

  • SHA1

    b849843a762a1ba020fb961bbe6b935922317df3

  • SHA256

    28c93deb36270cb08e80cae5722248b135951a3041e11dd4b8aa1828a4c1cef5

  • SHA512

    f2fa54e3e9aef2381e5cb87d5d767e6b9fb3e4a80f8d9748f15e6194c4da79d7c85807d56e3f9404efba94325ffe40a287974917a0055b53cd7c41dc0f8a5691

  • SSDEEP

    98304:SLXClnwPWrDSVYg5MHKO6HCfyAo77wRGpj3:ZlnwPihg+ByAo/F9

Score
7/10

Malware Config

Targets

    • Target

      2024-04-28_499fae01b3b8e6076e712d001b7ae7d5_ryuk

    • Size

      5.3MB

    • MD5

      499fae01b3b8e6076e712d001b7ae7d5

    • SHA1

      b849843a762a1ba020fb961bbe6b935922317df3

    • SHA256

      28c93deb36270cb08e80cae5722248b135951a3041e11dd4b8aa1828a4c1cef5

    • SHA512

      f2fa54e3e9aef2381e5cb87d5d767e6b9fb3e4a80f8d9748f15e6194c4da79d7c85807d56e3f9404efba94325ffe40a287974917a0055b53cd7c41dc0f8a5691

    • SSDEEP

      98304:SLXClnwPWrDSVYg5MHKO6HCfyAo77wRGpj3:ZlnwPihg+ByAo/F9

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

4
T1082

Query Registry

4
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks