General

  • Target

    2024-05-21_452313d742e6babc7a60a194117a7128_ryuk

  • Size

    5.5MB

  • Sample

    240521-t4jklaca31

  • MD5

    452313d742e6babc7a60a194117a7128

  • SHA1

    a69330ac385dbd776dd49ac1e5f740ccbde8f42f

  • SHA256

    647f5aa5a2ab133264ee460831efc8b0dc6a1688d21256f413ab83b0dfe59b0d

  • SHA512

    67288998e8fbd940966ed4a69f4e7122280d6c277537b0139eb05c61ae9f40f63d67f3a544c9dee92943cd20ba01627f7358366c09f6c356c4c4dc91521a87f3

  • SSDEEP

    49152:pEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1bn9tJEUxDG0BYYrLA50IHLGfD:9AI5pAdV9n9tbnR1VgBVmEfEkKK90

Score
7/10

Malware Config

Targets

    • Target

      2024-05-21_452313d742e6babc7a60a194117a7128_ryuk

    • Size

      5.5MB

    • MD5

      452313d742e6babc7a60a194117a7128

    • SHA1

      a69330ac385dbd776dd49ac1e5f740ccbde8f42f

    • SHA256

      647f5aa5a2ab133264ee460831efc8b0dc6a1688d21256f413ab83b0dfe59b0d

    • SHA512

      67288998e8fbd940966ed4a69f4e7122280d6c277537b0139eb05c61ae9f40f63d67f3a544c9dee92943cd20ba01627f7358366c09f6c356c4c4dc91521a87f3

    • SSDEEP

      49152:pEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1bn9tJEUxDG0BYYrLA50IHLGfD:9AI5pAdV9n9tbnR1VgBVmEfEkKK90

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

4
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks