General

  • Target

    2024-04-21_668cb083fed44ce79bb926286c4d4e56_ryuk

  • Size

    5.5MB

  • Sample

    240421-yrp9tsba9y

  • MD5

    668cb083fed44ce79bb926286c4d4e56

  • SHA1

    e655f6f018422e8e12388b6e74e0c2357ada577b

  • SHA256

    dbe0a86f38b3c2dedf9a922e82d9b7e18a0aa9edc4881af5f97ee8e3c37d9014

  • SHA512

    607f56403ece1188909e71b06ec6ffd4183fbfa4e938eee271d04bb9e588891d42c223d1b12078f6344b754bac595d7dca85bc131110b45f189515e9df08a23d

  • SSDEEP

    49152:5EFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGf+:tAI5pAdVJn9tbnR1VgBVmGDb0

Score
7/10

Malware Config

Targets

    • Target

      2024-04-21_668cb083fed44ce79bb926286c4d4e56_ryuk

    • Size

      5.5MB

    • MD5

      668cb083fed44ce79bb926286c4d4e56

    • SHA1

      e655f6f018422e8e12388b6e74e0c2357ada577b

    • SHA256

      dbe0a86f38b3c2dedf9a922e82d9b7e18a0aa9edc4881af5f97ee8e3c37d9014

    • SHA512

      607f56403ece1188909e71b06ec6ffd4183fbfa4e938eee271d04bb9e588891d42c223d1b12078f6344b754bac595d7dca85bc131110b45f189515e9df08a23d

    • SSDEEP

      49152:5EFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGf+:tAI5pAdVJn9tbnR1VgBVmGDb0

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks