General

  • Target

    2024-04-29_babc124ce4155269d557e72fa683e6ea_ryuk

  • Size

    2.2MB

  • Sample

    240429-gazy9sbh46

  • MD5

    babc124ce4155269d557e72fa683e6ea

  • SHA1

    35364f3ab58360c064fbda1ea32897588c609b0b

  • SHA256

    00453eed44ea7aed08f31da1fc00f2b2f3b3503db23c45f58afca92ef880be1b

  • SHA512

    322cfc95d0b07bb94792215a707c111ff84d6526744831af8acd4e8d4e6714b80a3295a763710c04b2db4cbdc0190cbed64f50e97dfeeb291cc88ddfca0f7f31

  • SSDEEP

    49152:EOOh3aN4kuLbegmtGjksDM2jh3BqS7YtGL/Als:OU4ku/ctX6MMQS7kGLws

Score
7/10

Malware Config

Targets

    • Target

      2024-04-29_babc124ce4155269d557e72fa683e6ea_ryuk

    • Size

      2.2MB

    • MD5

      babc124ce4155269d557e72fa683e6ea

    • SHA1

      35364f3ab58360c064fbda1ea32897588c609b0b

    • SHA256

      00453eed44ea7aed08f31da1fc00f2b2f3b3503db23c45f58afca92ef880be1b

    • SHA512

      322cfc95d0b07bb94792215a707c111ff84d6526744831af8acd4e8d4e6714b80a3295a763710c04b2db4cbdc0190cbed64f50e97dfeeb291cc88ddfca0f7f31

    • SSDEEP

      49152:EOOh3aN4kuLbegmtGjksDM2jh3BqS7YtGL/Als:OU4ku/ctX6MMQS7kGLws

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks