4246837bcfaed5915c5fd1a3b62016148559a06dbcf3db6b255c51b65900d71b | Triage

Sharing

General

Target

2024-05-21_cae43b3b0f46e5ce313c67fecc91e66b_ryuk
Size

2.2MB
Sample

240521-ydlpgsgd6w
MD5

cae43b3b0f46e5ce313c67fecc91e66b
SHA1

8a68f980effe23f783b1758fbcce3d46029f1719
SHA256

4246837bcfaed5915c5fd1a3b62016148559a06dbcf3db6b255c51b65900d71b
SHA512

ea7daa5969e2c5e410f9d7af3c01a4f1c77ae2ab9a788945e081552c8d4e8b240bea8b4a0f3f5411be05ca00c28d8b9a553c902e27016af16d7113aeb1318c25
SSDEEP

49152:VOOh3aN4kuLbegmtG7ksDM2jh3BqS7YtGL/Als:1U4ku/ctj6MMQS7kGLws

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  2024-05-21_cae43b3b0f46e5ce313c67fecc91e66b_ryuk
- Size
  
  2.2MB
- MD5
  
  cae43b3b0f46e5ce313c67fecc91e66b
- SHA1
  
  8a68f980effe23f783b1758fbcce3d46029f1719
- SHA256
  
  4246837bcfaed5915c5fd1a3b62016148559a06dbcf3db6b255c51b65900d71b
- SHA512
  
  ea7daa5969e2c5e410f9d7af3c01a4f1c77ae2ab9a788945e081552c8d4e8b240bea8b4a0f3f5411be05ca00c28d8b9a553c902e27016af16d7113aeb1318c25
- SSDEEP
  
  49152:VOOh3aN4kuLbegmtG7ksDM2jh3BqS7YtGL/Als:1U4ku/ctj6MMQS7kGLws
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2