General

  • Target

    2024-04-05_e9675a6beabc1dea9c8074b12c9239fd_ryuk

  • Size

    5.5MB

  • Sample

    240405-scl1zafe75

  • MD5

    e9675a6beabc1dea9c8074b12c9239fd

  • SHA1

    a7656010881928ca8f50c55f406648b5485ce5b7

  • SHA256

    d6a1b5faa4043a943d25f84d084891303fafed0a0df6fd3e3692e49427ce1bae

  • SHA512

    d444fc6b2d531fb3f2cfeb481ee10c6a17bb86b86dd9999aaebd9c3341cc58180f46f91a176048cf64ac93b89837f877344e4280740cb31aac4fc4378375ab76

  • SSDEEP

    98304:CAI5pAdVJn9tbnR1VgBVm2U7dG1yfpVBlH:CAsCh7XY/UoiPBx

Score
7/10

Malware Config

Targets

    • Target

      2024-04-05_e9675a6beabc1dea9c8074b12c9239fd_ryuk

    • Size

      5.5MB

    • MD5

      e9675a6beabc1dea9c8074b12c9239fd

    • SHA1

      a7656010881928ca8f50c55f406648b5485ce5b7

    • SHA256

      d6a1b5faa4043a943d25f84d084891303fafed0a0df6fd3e3692e49427ce1bae

    • SHA512

      d444fc6b2d531fb3f2cfeb481ee10c6a17bb86b86dd9999aaebd9c3341cc58180f46f91a176048cf64ac93b89837f877344e4280740cb31aac4fc4378375ab76

    • SSDEEP

      98304:CAI5pAdVJn9tbnR1VgBVm2U7dG1yfpVBlH:CAsCh7XY/UoiPBx

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks