General

  • Target

    2024-04-28_5bce471bdbb07f045e6712c0fb651cc0_ryuk

  • Size

    1.8MB

  • Sample

    240428-x66dxsfe31

  • MD5

    5bce471bdbb07f045e6712c0fb651cc0

  • SHA1

    3f2c9e3f1f46734c83d652f3945518dc9226f2bb

  • SHA256

    76a633787f7fd39a9cb7891bace55e74278c48d10ba8b137e83e876685717a03

  • SHA512

    c1be3b34566bb1f19b7d6a11f3ce09b1233ddee406c5f6d7fd811fd69326a58bcd772560ef6aaf1c1340b3dfa980db3cae84830de329db93edd6829561a99606

  • SSDEEP

    12288:CObJA4LWOsvAYFTf0DudXezE09Si/ckGHt6pshsPSGkYl2XIQCb+Lk1TWbPXQnAf:zdL3UTMgXe4i7ojhsP5Lgrk1TWb4AN5

Score
7/10

Malware Config

Targets

    • Target

      2024-04-28_5bce471bdbb07f045e6712c0fb651cc0_ryuk

    • Size

      1.8MB

    • MD5

      5bce471bdbb07f045e6712c0fb651cc0

    • SHA1

      3f2c9e3f1f46734c83d652f3945518dc9226f2bb

    • SHA256

      76a633787f7fd39a9cb7891bace55e74278c48d10ba8b137e83e876685717a03

    • SHA512

      c1be3b34566bb1f19b7d6a11f3ce09b1233ddee406c5f6d7fd811fd69326a58bcd772560ef6aaf1c1340b3dfa980db3cae84830de329db93edd6829561a99606

    • SSDEEP

      12288:CObJA4LWOsvAYFTf0DudXezE09Si/ckGHt6pshsPSGkYl2XIQCb+Lk1TWbPXQnAf:zdL3UTMgXe4i7ojhsP5Lgrk1TWb4AN5

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks