General

  • Target

    2024-02-21_72e785ea907ee3bd69a8686f92ca244b_ryuk

  • Size

    2.2MB

  • Sample

    240221-npfbqsfa79

  • MD5

    72e785ea907ee3bd69a8686f92ca244b

  • SHA1

    5d018a662811ed3e5bf316c9bc35e84994a4dd11

  • SHA256

    001ef488f9bb21f605f79bb24bbb368b53741ab9e379d064ab00f362c15c9375

  • SHA512

    91d4740ab1b4c6092335651380976e5bbb2e8170989da961be06c2265fbf1850afd109090f33009fef34e80675f2c72be2b271b041a7f7b42502dcac763df6a4

  • SSDEEP

    49152:oNl7soq7sQCc1kyG2xHywRfHIO2Ts4bvDEEjhMjSax84:cD2311kaxp9qEQWdO

Score
7/10

Malware Config

Targets

    • Target

      2024-02-21_72e785ea907ee3bd69a8686f92ca244b_ryuk

    • Size

      2.2MB

    • MD5

      72e785ea907ee3bd69a8686f92ca244b

    • SHA1

      5d018a662811ed3e5bf316c9bc35e84994a4dd11

    • SHA256

      001ef488f9bb21f605f79bb24bbb368b53741ab9e379d064ab00f362c15c9375

    • SHA512

      91d4740ab1b4c6092335651380976e5bbb2e8170989da961be06c2265fbf1850afd109090f33009fef34e80675f2c72be2b271b041a7f7b42502dcac763df6a4

    • SSDEEP

      49152:oNl7soq7sQCc1kyG2xHywRfHIO2Ts4bvDEEjhMjSax84:cD2311kaxp9qEQWdO

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks