General

  • Target

    2024-04-27_787f674b0cd0057977b650f13d435753_ryuk

  • Size

    4.6MB

  • Sample

    240427-3f9xbaba28

  • MD5

    787f674b0cd0057977b650f13d435753

  • SHA1

    0554fadf0e34a48e456325bc4791c3e88da68b3f

  • SHA256

    5641641d9764960166df58ba0c3e2b7fea707ce211f11e06b00e64c1f4851bfe

  • SHA512

    0b903f11b0d56c484f17354743c90630723b11d4d2459bfed3e882fab46a803949c239586563968fc232e768f1257399e284db96c058ff937b1405c2923b7f33

  • SSDEEP

    49152:MENv5eRGGISmTJTGcMOfoKYYnSld33f61sHi4/pCYuQfTX+5o7at4EhgRtet6TaC:dv64SwqcMEIiEdBCyRLXTE/kag

Score
10/10

Malware Config

Targets

    • Target

      2024-04-27_787f674b0cd0057977b650f13d435753_ryuk

    • Size

      4.6MB

    • MD5

      787f674b0cd0057977b650f13d435753

    • SHA1

      0554fadf0e34a48e456325bc4791c3e88da68b3f

    • SHA256

      5641641d9764960166df58ba0c3e2b7fea707ce211f11e06b00e64c1f4851bfe

    • SHA512

      0b903f11b0d56c484f17354743c90630723b11d4d2459bfed3e882fab46a803949c239586563968fc232e768f1257399e284db96c058ff937b1405c2923b7f33

    • SSDEEP

      49152:MENv5eRGGISmTJTGcMOfoKYYnSld33f61sHi4/pCYuQfTX+5o7at4EhgRtet6TaC:dv64SwqcMEIiEdBCyRLXTE/kag

    Score
    10/10
    • Modifies firewall policy service

    • Deletes itself

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks