General

  • Target

    2024-04-24_14f6bf6d014a5e011fd476b916499aba_ryuk

  • Size

    1.8MB

  • Sample

    240424-mrxs5agh8t

  • MD5

    14f6bf6d014a5e011fd476b916499aba

  • SHA1

    1594793c4ace43ceca0067e4cd6d469b3bd9e5b3

  • SHA256

    4712002ead8183b81f91776799021a376493036d274abb04ed683f5692697f08

  • SHA512

    b074a4fa664ec40b61944a2b02c71ca99c748606da8273b8646fec9fdabfdb0c43de5de4434adf269936b1679898af68f6210048a7883d1c259d5d52ff450979

  • SSDEEP

    49152:YKX0DzOswXyfymHQlIuQ0G05SEP+qJlS2:aXNOyfjqIIkEP+qJ

Score
7/10

Malware Config

Targets

    • Target

      2024-04-24_14f6bf6d014a5e011fd476b916499aba_ryuk

    • Size

      1.8MB

    • MD5

      14f6bf6d014a5e011fd476b916499aba

    • SHA1

      1594793c4ace43ceca0067e4cd6d469b3bd9e5b3

    • SHA256

      4712002ead8183b81f91776799021a376493036d274abb04ed683f5692697f08

    • SHA512

      b074a4fa664ec40b61944a2b02c71ca99c748606da8273b8646fec9fdabfdb0c43de5de4434adf269936b1679898af68f6210048a7883d1c259d5d52ff450979

    • SSDEEP

      49152:YKX0DzOswXyfymHQlIuQ0G05SEP+qJlS2:aXNOyfjqIIkEP+qJ

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks