c3bf29463baff4de1987f468b29876e4a607d4d576363873216f39eea6e242d1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-21_61fc77162693404972746588e0371393_ryuk
Size

2.2MB
Sample

240421-ggtqtsch7v
MD5

61fc77162693404972746588e0371393
SHA1

28e62ec2703a0efd526ce90491d07d5e05629767
SHA256

c3bf29463baff4de1987f468b29876e4a607d4d576363873216f39eea6e242d1
SHA512

8c523054bf6e91838e75b19852080d7c88a12e15e90a5dadc1e05c9fcf3cd7ac74ac36ebb766cf7f4cdc1f786f55d72da73b4217c55fcb33e4e3cd5efc65ee27
SSDEEP

24576:XOObVw4TaN1wdkukCba4oXtgLhU3wEdmh58W/i328ab4F+rM/aXq6bJfBUam6:XOOh3aN4kuLbegmtGV/i3da1YS6ozB

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  2024-04-21_61fc77162693404972746588e0371393_ryuk
- Size
  
  2.2MB
- MD5
  
  61fc77162693404972746588e0371393
- SHA1
  
  28e62ec2703a0efd526ce90491d07d5e05629767
- SHA256
  
  c3bf29463baff4de1987f468b29876e4a607d4d576363873216f39eea6e242d1
- SHA512
  
  8c523054bf6e91838e75b19852080d7c88a12e15e90a5dadc1e05c9fcf3cd7ac74ac36ebb766cf7f4cdc1f786f55d72da73b4217c55fcb33e4e3cd5efc65ee27
- SSDEEP
  
  24576:XOObVw4TaN1wdkukCba4oXtgLhU3wEdmh58W/i328ab4F+rM/aXq6bJfBUam6:XOOh3aN4kuLbegmtGV/i3da1YS6ozB
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2