General

  • Target

    2024-04-08_6d3d2c396defea4820efa18df3ed43e0_ryuk

  • Size

    1.0MB

  • Sample

    240408-2jls8adg79

  • MD5

    6d3d2c396defea4820efa18df3ed43e0

  • SHA1

    e1605f73589bfc7f873bd54f673fec1a9a5408c4

  • SHA256

    d4a84c3ab68313d209b38680c73a8508027b1c4540047f590531e83e0322750a

  • SHA512

    fc5403ad682780477227150260f4abb717934c47b32f535924b0ec285459579d268753b48043bd9d1e522534eed05f0cd27cdf9cc510e4a7db6710a080436c67

  • SSDEEP

    24576:z6V6VC/AyqGizWCaFbyhSkQ/7Gb8NLEbeZ:z6cbGizWCaFbpkQ/qoLEw

Score
7/10

Malware Config

Targets

    • Target

      2024-04-08_6d3d2c396defea4820efa18df3ed43e0_ryuk

    • Size

      1.0MB

    • MD5

      6d3d2c396defea4820efa18df3ed43e0

    • SHA1

      e1605f73589bfc7f873bd54f673fec1a9a5408c4

    • SHA256

      d4a84c3ab68313d209b38680c73a8508027b1c4540047f590531e83e0322750a

    • SHA512

      fc5403ad682780477227150260f4abb717934c47b32f535924b0ec285459579d268753b48043bd9d1e522534eed05f0cd27cdf9cc510e4a7db6710a080436c67

    • SSDEEP

      24576:z6V6VC/AyqGizWCaFbyhSkQ/7Gb8NLEbeZ:z6cbGizWCaFbpkQ/qoLEw

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks