General

  • Target

    2024-04-20_93fd029b34d01f7e6497fc1dfd51065e_ryuk

  • Size

    3.2MB

  • Sample

    240420-ngy4wafc94

  • MD5

    93fd029b34d01f7e6497fc1dfd51065e

  • SHA1

    1435172d10a930d552d34e25fd305e3669285d35

  • SHA256

    56acd0b3078ea1bf520d3eafc9a51a53d0bc01429649dbf723115ca9785ca1ec

  • SHA512

    52de4f2c6d20d773e6cbde523c6f5dd4d9f92c1bdfe789e4870c9f56d4aa9a686378cb026cc215be47d555188ab985d195e0145740c7edbf4bb8ff22facb07ac

  • SSDEEP

    49152:x5k1YCdptya507NUUWn043oHS3fTIYwVq1/xT3DDbw0TUqyjkQ/qoLEw:BNhSMYw8ynqo4w

Score
7/10

Malware Config

Targets

    • Target

      2024-04-20_93fd029b34d01f7e6497fc1dfd51065e_ryuk

    • Size

      3.2MB

    • MD5

      93fd029b34d01f7e6497fc1dfd51065e

    • SHA1

      1435172d10a930d552d34e25fd305e3669285d35

    • SHA256

      56acd0b3078ea1bf520d3eafc9a51a53d0bc01429649dbf723115ca9785ca1ec

    • SHA512

      52de4f2c6d20d773e6cbde523c6f5dd4d9f92c1bdfe789e4870c9f56d4aa9a686378cb026cc215be47d555188ab985d195e0145740c7edbf4bb8ff22facb07ac

    • SSDEEP

      49152:x5k1YCdptya507NUUWn043oHS3fTIYwVq1/xT3DDbw0TUqyjkQ/qoLEw:BNhSMYw8ynqo4w

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks