General

  • Target

    2024-02-04_e8f635639cbf79ec8d3552baa358eb4c_ryuk

  • Size

    5.5MB

  • Sample

    240204-p1d4gsbhhm

  • MD5

    e8f635639cbf79ec8d3552baa358eb4c

  • SHA1

    70328f79e64ba5102536a992517a766adeada552

  • SHA256

    36ae962f2513c5d01a49cfc006ba8bbd41fe674a8650f678d9d3569eeef2255d

  • SHA512

    abed13aff19ebce87b822e3612563a71773fd0369cd47b819ba1ed291e88fdb1efaad37bfba0c4241e01c66f22247b68296761f2b5524950d0af6e0ca99fae53

  • SSDEEP

    98304:oAI5pAdVJn9tbnR1VgBVmIU7dG1yfpVBlH:oAsCh7XYxUoiPBx

Score
7/10

Malware Config

Targets

    • Target

      2024-02-04_e8f635639cbf79ec8d3552baa358eb4c_ryuk

    • Size

      5.5MB

    • MD5

      e8f635639cbf79ec8d3552baa358eb4c

    • SHA1

      70328f79e64ba5102536a992517a766adeada552

    • SHA256

      36ae962f2513c5d01a49cfc006ba8bbd41fe674a8650f678d9d3569eeef2255d

    • SHA512

      abed13aff19ebce87b822e3612563a71773fd0369cd47b819ba1ed291e88fdb1efaad37bfba0c4241e01c66f22247b68296761f2b5524950d0af6e0ca99fae53

    • SSDEEP

      98304:oAI5pAdVJn9tbnR1VgBVmIU7dG1yfpVBlH:oAsCh7XYxUoiPBx

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks