General

  • Target

    2024-04-28_dd9fecdd0aaf57632be8ea6fa85db336_ryuk

  • Size

    2.2MB

  • Sample

    240428-p3kztagf4s

  • MD5

    dd9fecdd0aaf57632be8ea6fa85db336

  • SHA1

    d20d60f2b191264d704c09bfbf6269f8f00072c1

  • SHA256

    d9f72e1f0148039409682d6f4516c6c8214f519cd47daa4843eda4737e18c8ec

  • SHA512

    77d18a2fcbc4527d9a9510bb52b40a33891d9a68298785d5d93a50cc77f9dcd6ca1a31c55074979f43dd1b62cb86d3285199f05461981b8d7cf68943111318fe

  • SSDEEP

    49152:dNl7soq7sQCr1kyG2xHywRfHIO2Ts4bvDADmg27RnWGj:FD23S1kaxp9qAD527BWG

Score
7/10

Malware Config

Targets

    • Target

      2024-04-28_dd9fecdd0aaf57632be8ea6fa85db336_ryuk

    • Size

      2.2MB

    • MD5

      dd9fecdd0aaf57632be8ea6fa85db336

    • SHA1

      d20d60f2b191264d704c09bfbf6269f8f00072c1

    • SHA256

      d9f72e1f0148039409682d6f4516c6c8214f519cd47daa4843eda4737e18c8ec

    • SHA512

      77d18a2fcbc4527d9a9510bb52b40a33891d9a68298785d5d93a50cc77f9dcd6ca1a31c55074979f43dd1b62cb86d3285199f05461981b8d7cf68943111318fe

    • SSDEEP

      49152:dNl7soq7sQCr1kyG2xHywRfHIO2Ts4bvDADmg27RnWGj:FD23S1kaxp9qAD527BWG

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks