General

  • Target

    2024-05-22_91bc38c95095944f4ff3b16d836d9f5f_ryuk

  • Size

    5.5MB

  • Sample

    240522-2sxl3sca79

  • MD5

    91bc38c95095944f4ff3b16d836d9f5f

  • SHA1

    21df742dc71c1425ae87230505ccab1eeae4ea24

  • SHA256

    ad87ae9482ce2c7b84c8d4a07a687ba3d18f2a408d312a83dfb5a1f4970f8d64

  • SHA512

    7880baef14f63b60c8e9b8fdc3a80dc11c5ea2061a3ee2405800605aa2fc5d06f7cf32beaf4c31f7341f48af28f02708cacbd88a812f3b08cf37f97973ebf2fe

  • SSDEEP

    49152:xEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfw:1AI5pAdVJn9tbnR1VgBVmUmqrWETR9b

Score
7/10

Malware Config

Targets

    • Target

      2024-05-22_91bc38c95095944f4ff3b16d836d9f5f_ryuk

    • Size

      5.5MB

    • MD5

      91bc38c95095944f4ff3b16d836d9f5f

    • SHA1

      21df742dc71c1425ae87230505ccab1eeae4ea24

    • SHA256

      ad87ae9482ce2c7b84c8d4a07a687ba3d18f2a408d312a83dfb5a1f4970f8d64

    • SHA512

      7880baef14f63b60c8e9b8fdc3a80dc11c5ea2061a3ee2405800605aa2fc5d06f7cf32beaf4c31f7341f48af28f02708cacbd88a812f3b08cf37f97973ebf2fe

    • SSDEEP

      49152:xEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfw:1AI5pAdVJn9tbnR1VgBVmUmqrWETR9b

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks