General

  • Target

    2024-03-29_d88160a73bd84f657519f7964bbaffb6_ryuk

  • Size

    2.1MB

  • Sample

    240329-vt4y8add3y

  • MD5

    d88160a73bd84f657519f7964bbaffb6

  • SHA1

    578be665e2f47f794513bece6b9b23494c5a5b0c

  • SHA256

    d3206e03694b1127cc0a27ad0ecd6b5563defbd50d0457988c370752cfa76776

  • SHA512

    7307f7135c2344b34995a65399ddac4110c9eb2240d0c717fff17426247401be2082c6ac9ec392d4894470a9cb8958ae961331391efd7ee8c6b110b168d2c206

  • SSDEEP

    49152:0uYk3H5koUzfTqkkYLO/W2buywzMbOX+T7z5oDmg27RnWGj:07fTqi90bED527BWG

Score
7/10

Malware Config

Targets

    • Target

      2024-03-29_d88160a73bd84f657519f7964bbaffb6_ryuk

    • Size

      2.1MB

    • MD5

      d88160a73bd84f657519f7964bbaffb6

    • SHA1

      578be665e2f47f794513bece6b9b23494c5a5b0c

    • SHA256

      d3206e03694b1127cc0a27ad0ecd6b5563defbd50d0457988c370752cfa76776

    • SHA512

      7307f7135c2344b34995a65399ddac4110c9eb2240d0c717fff17426247401be2082c6ac9ec392d4894470a9cb8958ae961331391efd7ee8c6b110b168d2c206

    • SSDEEP

      49152:0uYk3H5koUzfTqkkYLO/W2buywzMbOX+T7z5oDmg27RnWGj:07fTqi90bED527BWG

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks