General

  • Target

    2024-04-11_7ffd01fe350059a072b7306fd276a820_ryuk

  • Size

    1.7MB

  • Sample

    240411-thj91afa69

  • MD5

    7ffd01fe350059a072b7306fd276a820

  • SHA1

    778f495cf7463b3c81da87ced4dcdf7efdbb9c61

  • SHA256

    f12fbeb419e24bcea91c798f8a4b0e5de52d7f6c826587f08713e71a188e1329

  • SHA512

    877fd96cdaed08b51775648f15749a7d2241c2612ce39df3d9fd852083bebc4675c49f5db77206cf032616f87c660020dfa34d5bbcf0dfd5de1068e49cd4a655

  • SSDEEP

    24576:NANw243Ki1vaYxhaOKVh1DiIz33PTgIF:New2nGhaOIh1Dp33PM

Score
7/10

Malware Config

Targets

    • Target

      2024-04-11_7ffd01fe350059a072b7306fd276a820_ryuk

    • Size

      1.7MB

    • MD5

      7ffd01fe350059a072b7306fd276a820

    • SHA1

      778f495cf7463b3c81da87ced4dcdf7efdbb9c61

    • SHA256

      f12fbeb419e24bcea91c798f8a4b0e5de52d7f6c826587f08713e71a188e1329

    • SHA512

      877fd96cdaed08b51775648f15749a7d2241c2612ce39df3d9fd852083bebc4675c49f5db77206cf032616f87c660020dfa34d5bbcf0dfd5de1068e49cd4a655

    • SSDEEP

      24576:NANw243Ki1vaYxhaOKVh1DiIz33PTgIF:New2nGhaOIh1Dp33PM

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks