General

  • Target

    2024-04-27_34c4254e235fc7eec9583e60f9caa6aa_ryuk

  • Size

    3.7MB

  • Sample

    240427-2ddknaac4t

  • MD5

    34c4254e235fc7eec9583e60f9caa6aa

  • SHA1

    9618ce799603ab29f6bcf6ad6980cc9fb9ca61ac

  • SHA256

    db1d66eed8459ce1b7c72d2c4e1326a1cc5bed50e4535679b8e7890fe3106d91

  • SHA512

    992043000c63a9ce9cfe0f3cae0a64f161500727e49debdf70969291c4c03921fd34920bba3743f8aa0df3a5f9653b4367496ef54112ad6a87d4ce929bc79a04

  • SSDEEP

    49152:LFg351Jg2TDu3Smqh7U91MWbkujdGXEBj3liyBteB9hFtYdqlMMNPFd1YMGyNNAW:S/Gbk2GXmtdqPPFrYMzYHD527BWG

Score
7/10

Malware Config

Targets

    • Target

      2024-04-27_34c4254e235fc7eec9583e60f9caa6aa_ryuk

    • Size

      3.7MB

    • MD5

      34c4254e235fc7eec9583e60f9caa6aa

    • SHA1

      9618ce799603ab29f6bcf6ad6980cc9fb9ca61ac

    • SHA256

      db1d66eed8459ce1b7c72d2c4e1326a1cc5bed50e4535679b8e7890fe3106d91

    • SHA512

      992043000c63a9ce9cfe0f3cae0a64f161500727e49debdf70969291c4c03921fd34920bba3743f8aa0df3a5f9653b4367496ef54112ad6a87d4ce929bc79a04

    • SSDEEP

      49152:LFg351Jg2TDu3Smqh7U91MWbkujdGXEBj3liyBteB9hFtYdqlMMNPFd1YMGyNNAW:S/Gbk2GXmtdqPPFrYMzYHD527BWG

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks