09cb175993902788863f3b7049f174bde7aaf26895ac2be9fd0ca38b3a3098b7 | Triage

Sharing

General

Target

2024-01-11_76ca93a0dbf7f24717045392292c1f57_ryuk
Size

5.5MB
Sample

240112-gqvz9ahadr
MD5

76ca93a0dbf7f24717045392292c1f57
SHA1

152ae1f53266941308b47ef82547cd0fde5f0aff
SHA256

09cb175993902788863f3b7049f174bde7aaf26895ac2be9fd0ca38b3a3098b7
SHA512

af1726da3301f17ff356c9aa93bc97512d6738d1dab4991723505508bd5c2dd503f0ccf1734d3dbae68540646403baa11a6d0f5176ba974aff17a2a89c31927a
SSDEEP

49152:yEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1bn9tJEUxDG0BYYrLA50IHLGf0:YAI5pAdV9n9tbnR1VgBVm96H/

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  2024-01-11_76ca93a0dbf7f24717045392292c1f57_ryuk
- Size
  
  5.5MB
- MD5
  
  76ca93a0dbf7f24717045392292c1f57
- SHA1
  
  152ae1f53266941308b47ef82547cd0fde5f0aff
- SHA256
  
  09cb175993902788863f3b7049f174bde7aaf26895ac2be9fd0ca38b3a3098b7
- SHA512
  
  af1726da3301f17ff356c9aa93bc97512d6738d1dab4991723505508bd5c2dd503f0ccf1734d3dbae68540646403baa11a6d0f5176ba974aff17a2a89c31927a
- SSDEEP
  
  49152:yEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1bn9tJEUxDG0BYYrLA50IHLGf0:YAI5pAdV9n9tbnR1VgBVm96H/
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2