General

  • Target

    2024-04-23_f24ee784771335d6d518c5a66ec6172b_ryuk

  • Size

    1.7MB

  • Sample

    240423-kdmpwseh56

  • MD5

    f24ee784771335d6d518c5a66ec6172b

  • SHA1

    cda0e73f74308fb9a599a3d041ff30e7a8c8b13c

  • SHA256

    cd1e9a6b37c424798049b5b0e77a835f4cd3af3701f70bbb7789e49736dfc4c1

  • SHA512

    739faa1065b20ec0116a07e176b9ddd99d79704481a5cdd58acd82b95c5b1a90b7d9b0638fff9d156aa92e7f24264130b94b401ac406fe36b806183d674bae3c

  • SSDEEP

    49152:lgtHUujpj7AewZmZhRdhE6f9Ckt7c20+9qNxUW:2Fh7ZhZfEkKK90

Score
7/10

Malware Config

Targets

    • Target

      2024-04-23_f24ee784771335d6d518c5a66ec6172b_ryuk

    • Size

      1.7MB

    • MD5

      f24ee784771335d6d518c5a66ec6172b

    • SHA1

      cda0e73f74308fb9a599a3d041ff30e7a8c8b13c

    • SHA256

      cd1e9a6b37c424798049b5b0e77a835f4cd3af3701f70bbb7789e49736dfc4c1

    • SHA512

      739faa1065b20ec0116a07e176b9ddd99d79704481a5cdd58acd82b95c5b1a90b7d9b0638fff9d156aa92e7f24264130b94b401ac406fe36b806183d674bae3c

    • SSDEEP

      49152:lgtHUujpj7AewZmZhRdhE6f9Ckt7c20+9qNxUW:2Fh7ZhZfEkKK90

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks