General

  • Target

    2024-04-19_4870a029a52a639945e67e65cd38b472_ryuk

  • Size

    1.7MB

  • Sample

    240419-l8hvvsfa77

  • MD5

    4870a029a52a639945e67e65cd38b472

  • SHA1

    25b9784a0d9c0a126760fbbeaca91d6bfb52babb

  • SHA256

    1404261b7087eb9d87f3b43d2ee4ebc9eb44c2cbe3a6959b0fdebcb6a5b51e18

  • SHA512

    f20161c684057b0e8b9ee788602cf83368eb03d561b8d8b5e39cca866cede81acf10e7dbe6fdf9015c98080a8015cd717723824acec213c9e8c9b52506ab06e7

  • SSDEEP

    49152:8gtHUujpj7AewZdZhRdhEngDUYmvFur31yAipQCtXxc0H:/Fh4ZhpU7dG1yfpVBlH

Score
7/10

Malware Config

Targets

    • Target

      2024-04-19_4870a029a52a639945e67e65cd38b472_ryuk

    • Size

      1.7MB

    • MD5

      4870a029a52a639945e67e65cd38b472

    • SHA1

      25b9784a0d9c0a126760fbbeaca91d6bfb52babb

    • SHA256

      1404261b7087eb9d87f3b43d2ee4ebc9eb44c2cbe3a6959b0fdebcb6a5b51e18

    • SHA512

      f20161c684057b0e8b9ee788602cf83368eb03d561b8d8b5e39cca866cede81acf10e7dbe6fdf9015c98080a8015cd717723824acec213c9e8c9b52506ab06e7

    • SSDEEP

      49152:8gtHUujpj7AewZdZhRdhEngDUYmvFur31yAipQCtXxc0H:/Fh4ZhpU7dG1yfpVBlH

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks