General

  • Target

    2024-04-11_641e1b6b7a6e0e9d0be72cb1f3669247_ryuk

  • Size

    5.5MB

  • Sample

    240411-mfa5zshe35

  • MD5

    641e1b6b7a6e0e9d0be72cb1f3669247

  • SHA1

    01b17f02da09f38a632c2d080b2b7daabab27635

  • SHA256

    6cd7bf1edee842ffabf74a0ca57af5c82594aa28d1cbcfe62f1db592e90796e0

  • SHA512

    bf5558736d9c0f985e0bc27c8d730baacf86a6c6a0f06eebf4f2441e2c0fba8460774ca1bd4e0b667c7edcbe7752f251ea325675948a5f7c1b1cb988e928ade2

  • SSDEEP

    98304:4AI5pAdVJn9tbnR1VgBVm870uMhSBrkNq:4AsCh7XY3IoQ

Score
7/10

Malware Config

Targets

    • Target

      2024-04-11_641e1b6b7a6e0e9d0be72cb1f3669247_ryuk

    • Size

      5.5MB

    • MD5

      641e1b6b7a6e0e9d0be72cb1f3669247

    • SHA1

      01b17f02da09f38a632c2d080b2b7daabab27635

    • SHA256

      6cd7bf1edee842ffabf74a0ca57af5c82594aa28d1cbcfe62f1db592e90796e0

    • SHA512

      bf5558736d9c0f985e0bc27c8d730baacf86a6c6a0f06eebf4f2441e2c0fba8460774ca1bd4e0b667c7edcbe7752f251ea325675948a5f7c1b1cb988e928ade2

    • SSDEEP

      98304:4AI5pAdVJn9tbnR1VgBVm870uMhSBrkNq:4AsCh7XY3IoQ

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks