General

  • Target

    2024-04-03_18393a064a416bcfd72b4f4a1f13a6bb_ryuk

  • Size

    5.5MB

  • Sample

    240403-ykbg4aah8y

  • MD5

    18393a064a416bcfd72b4f4a1f13a6bb

  • SHA1

    1db8fd03039ff34014dcd64cbbf1e5b69cddb464

  • SHA256

    d394d8cc76e931d8cc470c90f008be899a5acf0570b4b247e041cbe947909931

  • SHA512

    f7fe91dc96557411ed1b84b52911338e64345499002fce202c2c6d35fbd04594e21a04aa3270d234e33369b22aea4a377f3bd432a6cc3969e53c61de157c1837

  • SSDEEP

    49152:jEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGf4:/AI5pAdVJn9tbnR1VgBVmtfEkKK90

Score
7/10

Malware Config

Targets

    • Target

      2024-04-03_18393a064a416bcfd72b4f4a1f13a6bb_ryuk

    • Size

      5.5MB

    • MD5

      18393a064a416bcfd72b4f4a1f13a6bb

    • SHA1

      1db8fd03039ff34014dcd64cbbf1e5b69cddb464

    • SHA256

      d394d8cc76e931d8cc470c90f008be899a5acf0570b4b247e041cbe947909931

    • SHA512

      f7fe91dc96557411ed1b84b52911338e64345499002fce202c2c6d35fbd04594e21a04aa3270d234e33369b22aea4a377f3bd432a6cc3969e53c61de157c1837

    • SSDEEP

      49152:jEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGf4:/AI5pAdVJn9tbnR1VgBVmtfEkKK90

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks