General

  • Target

    2024-01-27_7579d66848179bb9140dff31d18b090d_ryuk

  • Size

    1.8MB

  • Sample

    240127-bt6y2aade3

  • MD5

    7579d66848179bb9140dff31d18b090d

  • SHA1

    037e65f8adc3e2b5cc46f40a551904167b2ec5dc

  • SHA256

    c2fd8d6184cfb912eaaca283e8883c58ed374df8dca72774f1bbc3fd82b375e2

  • SHA512

    6d212b484bec81dd4f755f8200a8e42096066aa1829f01bcb7dc2aa531ef0cc0aaca6d30983da741c78f28f6323462aa210e2c4bd9d29d338739c4bd044fa353

  • SSDEEP

    49152:3KX0DzOswXefymHQlIuQ9t2r4PRSEk1ul:1XNOefjqIBt2sEE5

Score
7/10

Malware Config

Targets

    • Target

      2024-01-27_7579d66848179bb9140dff31d18b090d_ryuk

    • Size

      1.8MB

    • MD5

      7579d66848179bb9140dff31d18b090d

    • SHA1

      037e65f8adc3e2b5cc46f40a551904167b2ec5dc

    • SHA256

      c2fd8d6184cfb912eaaca283e8883c58ed374df8dca72774f1bbc3fd82b375e2

    • SHA512

      6d212b484bec81dd4f755f8200a8e42096066aa1829f01bcb7dc2aa531ef0cc0aaca6d30983da741c78f28f6323462aa210e2c4bd9d29d338739c4bd044fa353

    • SSDEEP

      49152:3KX0DzOswXefymHQlIuQ9t2r4PRSEk1ul:1XNOefjqIBt2sEE5

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks