General

  • Target

    2024-04-03_3fbe63741a27db999db3d93df77c3bad_ryuk

  • Size

    2.2MB

  • Sample

    240403-w8wf3ahe43

  • MD5

    3fbe63741a27db999db3d93df77c3bad

  • SHA1

    c819f9a98c370f99d9f2a685db001767ae5d9a6c

  • SHA256

    f9a356e424d2679758c95214b66463344b077767e591853516d6f623fa55f375

  • SHA512

    31cbc802383cc92ff45a830e121c806ceb28edf7311744ef390977cffb9c6a3d2b716f1911cfd91222325eaf99ed8480a622734d9e1c6c5f0698bf4c1acb3855

  • SSDEEP

    49152:dOOh3aN4huLbegmtGVF+iK9bkAVFPdvLo:9U4hu/ctyF+iY3FPdo

Score
7/10

Malware Config

Targets

    • Target

      2024-04-03_3fbe63741a27db999db3d93df77c3bad_ryuk

    • Size

      2.2MB

    • MD5

      3fbe63741a27db999db3d93df77c3bad

    • SHA1

      c819f9a98c370f99d9f2a685db001767ae5d9a6c

    • SHA256

      f9a356e424d2679758c95214b66463344b077767e591853516d6f623fa55f375

    • SHA512

      31cbc802383cc92ff45a830e121c806ceb28edf7311744ef390977cffb9c6a3d2b716f1911cfd91222325eaf99ed8480a622734d9e1c6c5f0698bf4c1acb3855

    • SSDEEP

      49152:dOOh3aN4huLbegmtGVF+iK9bkAVFPdvLo:9U4hu/ctyF+iY3FPdo

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks