General

  • Target

    2024-05-03_eb4466c636fb8029f00bb5f5eded6d36_ryuk

  • Size

    4.6MB

  • Sample

    240503-v7w6jaeh46

  • MD5

    eb4466c636fb8029f00bb5f5eded6d36

  • SHA1

    5ced4a8c3d39ff1899a9e67cc6971ff9e7a6b5de

  • SHA256

    1fc6208032fd4e20cb39a345e3bff82f7798a27da2613d6c1e0352bf95117ee3

  • SHA512

    574dd18e5acd92abf4261b8bf979b0af9b71d056edebc527761b5ef4a8af10209c0b81cb738347e9b060a0bb6a7e71ba1884bfcdb5d0a8678b87a9d2c1361da1

  • SSDEEP

    49152:4rB927JqNYVZ5bW2QNh7QgfUofmlh5Evno2Hr9M/EN/qrlq3S+okgvTTl87ePjQr:qjr/LMgfUJcta/CrxAM78

Score
7/10

Malware Config

Targets

    • Target

      2024-05-03_eb4466c636fb8029f00bb5f5eded6d36_ryuk

    • Size

      4.6MB

    • MD5

      eb4466c636fb8029f00bb5f5eded6d36

    • SHA1

      5ced4a8c3d39ff1899a9e67cc6971ff9e7a6b5de

    • SHA256

      1fc6208032fd4e20cb39a345e3bff82f7798a27da2613d6c1e0352bf95117ee3

    • SHA512

      574dd18e5acd92abf4261b8bf979b0af9b71d056edebc527761b5ef4a8af10209c0b81cb738347e9b060a0bb6a7e71ba1884bfcdb5d0a8678b87a9d2c1361da1

    • SSDEEP

      49152:4rB927JqNYVZ5bW2QNh7QgfUofmlh5Evno2Hr9M/EN/qrlq3S+okgvTTl87ePjQr:qjr/LMgfUJcta/CrxAM78

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks