General

  • Target

    2024-05-14_1682dd37e6f887bd74abfa304a0fc576_ryuk

  • Size

    802KB

  • Sample

    240514-cverlsfc6w

  • MD5

    1682dd37e6f887bd74abfa304a0fc576

  • SHA1

    a7158bc39a2832651b5bba1ec183672cd707967b

  • SHA256

    5f793d1a586fc0e72a698c11f25eb0ab269db1fe296d985242ad97afa203adc0

  • SHA512

    77f83ea885014fe0f7650321a2b6ec6a1b625d0bca78200f9d745326c23481ad1c27b2b5aee67368bfa5abffa9160780a40592a9e91458c9259d1a15b84a4de4

  • SSDEEP

    24576:T58WQuv6f5sqjnhMgeiCl7G0nehbGZpbD:FI9Dmg27RnWGj

Score
7/10

Malware Config

Targets

    • Target

      2024-05-14_1682dd37e6f887bd74abfa304a0fc576_ryuk

    • Size

      802KB

    • MD5

      1682dd37e6f887bd74abfa304a0fc576

    • SHA1

      a7158bc39a2832651b5bba1ec183672cd707967b

    • SHA256

      5f793d1a586fc0e72a698c11f25eb0ab269db1fe296d985242ad97afa203adc0

    • SHA512

      77f83ea885014fe0f7650321a2b6ec6a1b625d0bca78200f9d745326c23481ad1c27b2b5aee67368bfa5abffa9160780a40592a9e91458c9259d1a15b84a4de4

    • SSDEEP

      24576:T58WQuv6f5sqjnhMgeiCl7G0nehbGZpbD:FI9Dmg27RnWGj

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks