General

  • Target

    2024-05-11_a79bd89660eb958c071aa43869d7a918_ryuk

  • Size

    5.5MB

  • Sample

    240511-k6ejzsdd25

  • MD5

    a79bd89660eb958c071aa43869d7a918

  • SHA1

    3f648f9b4ecb4a5639c2270a2490ab3157a895f6

  • SHA256

    72c56d1a2dcd9e98a186b4254009e397968d91ce855cf43e465d9c882a69fd8d

  • SHA512

    8993be0fae70c3bfd9e62ae2db39017d754973982dd4d2db1c13fab50d2c6b643db44abd5fba1ddcbd1638e6783ba1f0eb3da310e03c173e76eb473f1fcd21c7

  • SSDEEP

    49152:gEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfp:uAI5pAdVJn9tbnR1VgBVmNpAhQ1CNvi

Score
7/10

Malware Config

Targets

    • Target

      2024-05-11_a79bd89660eb958c071aa43869d7a918_ryuk

    • Size

      5.5MB

    • MD5

      a79bd89660eb958c071aa43869d7a918

    • SHA1

      3f648f9b4ecb4a5639c2270a2490ab3157a895f6

    • SHA256

      72c56d1a2dcd9e98a186b4254009e397968d91ce855cf43e465d9c882a69fd8d

    • SHA512

      8993be0fae70c3bfd9e62ae2db39017d754973982dd4d2db1c13fab50d2c6b643db44abd5fba1ddcbd1638e6783ba1f0eb3da310e03c173e76eb473f1fcd21c7

    • SSDEEP

      49152:gEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfp:uAI5pAdVJn9tbnR1VgBVmNpAhQ1CNvi

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks