General

  • Target

    2024-04-16_9006b1acddb28c853bef18f6c807137a_ryuk

  • Size

    2.2MB

  • Sample

    240416-vcjlysfc26

  • MD5

    9006b1acddb28c853bef18f6c807137a

  • SHA1

    4c8c6c00a952858f3badf9bbd4ad6b3f494643e9

  • SHA256

    22d7097fe3f72523a50765078594c76914efe1f11a46142360def7bee46d0b83

  • SHA512

    03bc11c38fc8e26a626aab266280746b443ce000fc2d92aecb4200124876b4491f2d8ab87976e1eb14b99b427dd79f2a6206dfc5679d5943890dcb061968fec1

  • SSDEEP

    49152:lNl7soq7sQCT1kyG2xHywRfHIO2Ts4bvDny8rZuRd:ND23a1kaxp9q/rZSd

Score
7/10

Malware Config

Targets

    • Target

      2024-04-16_9006b1acddb28c853bef18f6c807137a_ryuk

    • Size

      2.2MB

    • MD5

      9006b1acddb28c853bef18f6c807137a

    • SHA1

      4c8c6c00a952858f3badf9bbd4ad6b3f494643e9

    • SHA256

      22d7097fe3f72523a50765078594c76914efe1f11a46142360def7bee46d0b83

    • SHA512

      03bc11c38fc8e26a626aab266280746b443ce000fc2d92aecb4200124876b4491f2d8ab87976e1eb14b99b427dd79f2a6206dfc5679d5943890dcb061968fec1

    • SSDEEP

      49152:lNl7soq7sQCT1kyG2xHywRfHIO2Ts4bvDny8rZuRd:ND23a1kaxp9q/rZSd

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks