ee302e24df0bb6c0b4e80a17ba9f0fd4a3f54f8a50085f831ae15d68e60d0323 | Triage

Sharing

General

Target

2024-03-05_c47f8e70e10330cd7516cb742d9df861_ryuk
Size

5.5MB
Sample

240305-l7h48sdb77
MD5

c47f8e70e10330cd7516cb742d9df861
SHA1

1c587e093c8695ede90af876c213b79cd65e348a
SHA256

ee302e24df0bb6c0b4e80a17ba9f0fd4a3f54f8a50085f831ae15d68e60d0323
SHA512

4a2068d812d9541b064a21ceb4c5074b5d00e43022c4b91f742dc8d3434c60cb6f55016784e927aafcf5d50c3716f6a6e9fcad3104eade2a4caef2aa81af9363
SSDEEP

98304:uJEHW0SWi9lk8vQmJ3Xgvs1+ACR/DCx2uI9:7iIe+s1+AEB

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  2024-03-05_c47f8e70e10330cd7516cb742d9df861_ryuk
- Size
  
  5.5MB
- MD5
  
  c47f8e70e10330cd7516cb742d9df861
- SHA1
  
  1c587e093c8695ede90af876c213b79cd65e348a
- SHA256
  
  ee302e24df0bb6c0b4e80a17ba9f0fd4a3f54f8a50085f831ae15d68e60d0323
- SHA512
  
  4a2068d812d9541b064a21ceb4c5074b5d00e43022c4b91f742dc8d3434c60cb6f55016784e927aafcf5d50c3716f6a6e9fcad3104eade2a4caef2aa81af9363
- SSDEEP
  
  98304:uJEHW0SWi9lk8vQmJ3Xgvs1+ACR/DCx2uI9:7iIe+s1+AEB
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2