General

  • Target

    2024-04-23_ffa216d998a5401540e08f25bd892dc4_ryuk

  • Size

    2.2MB

  • Sample

    240423-vd3q8aaa94

  • MD5

    ffa216d998a5401540e08f25bd892dc4

  • SHA1

    c112a91ca54f0fa7fb42e20ffefaf9113a021df6

  • SHA256

    25835fa4677149b7a467136ec66678bdeec5c11b06ae158bef0f320eed2e9230

  • SHA512

    7a8b37073b74632adbc9d31e07f307aba04ab8e0a3142e46329f59fc8b5b888b4998341b35e95f7a6d57c8bb1f2e476023cbcec71cf30c55922874b6e7f7e67f

  • SSDEEP

    49152:MNl7soq7sQCr1kyG2xHywRfHIO2Ts4bvDnaB0zj0yjoB2:YD23S1kaxp9qaB2Yyjl

Score
7/10

Malware Config

Targets

    • Target

      2024-04-23_ffa216d998a5401540e08f25bd892dc4_ryuk

    • Size

      2.2MB

    • MD5

      ffa216d998a5401540e08f25bd892dc4

    • SHA1

      c112a91ca54f0fa7fb42e20ffefaf9113a021df6

    • SHA256

      25835fa4677149b7a467136ec66678bdeec5c11b06ae158bef0f320eed2e9230

    • SHA512

      7a8b37073b74632adbc9d31e07f307aba04ab8e0a3142e46329f59fc8b5b888b4998341b35e95f7a6d57c8bb1f2e476023cbcec71cf30c55922874b6e7f7e67f

    • SSDEEP

      49152:MNl7soq7sQCr1kyG2xHywRfHIO2Ts4bvDnaB0zj0yjoB2:YD23S1kaxp9qaB2Yyjl

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks