General

  • Target

    2024-05-21_697c6e51c67e007beec7b249434e32b2_ryuk

  • Size

    5.5MB

  • Sample

    240521-se18nshh36

  • MD5

    697c6e51c67e007beec7b249434e32b2

  • SHA1

    12d265b30b119adf14d448481396a08e4b7920a3

  • SHA256

    354ed86bc085f29c711da06c26bccd49f072ae6e61b0701c919efb65e3409c51

  • SHA512

    d5d37a511e23bd829043fc20a86c4225134f546c5b029618d7dbea7ddcd4bd8dbb8a457d335df0bf85ec494d2634d94cf5eb7c5ad9d6903ba4e062a70b4d562f

  • SSDEEP

    49152:EEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Gn9tJEUxDG0BYYrLA50IHLGfq:iAI5pAdVQn9tbnR1VgBVmQnlS

Score
7/10

Malware Config

Targets

    • Target

      2024-05-21_697c6e51c67e007beec7b249434e32b2_ryuk

    • Size

      5.5MB

    • MD5

      697c6e51c67e007beec7b249434e32b2

    • SHA1

      12d265b30b119adf14d448481396a08e4b7920a3

    • SHA256

      354ed86bc085f29c711da06c26bccd49f072ae6e61b0701c919efb65e3409c51

    • SHA512

      d5d37a511e23bd829043fc20a86c4225134f546c5b029618d7dbea7ddcd4bd8dbb8a457d335df0bf85ec494d2634d94cf5eb7c5ad9d6903ba4e062a70b4d562f

    • SSDEEP

      49152:EEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Gn9tJEUxDG0BYYrLA50IHLGfq:iAI5pAdVQn9tbnR1VgBVmQnlS

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

4
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks