General

  • Target

    2024-05-22_6edc9f7af1d66c343065d3880f204bfa_ryuk

  • Size

    2.8MB

  • Sample

    240522-yxmqwseh68

  • MD5

    6edc9f7af1d66c343065d3880f204bfa

  • SHA1

    45fbb90552272afef193e4830273920b0f1c49c2

  • SHA256

    ed2d38577d34fe2f21998dd9e672246515c59559265346f6ff32ac83256d0ae2

  • SHA512

    991715b9c77a0d724dd5bc4de0c32d93b478f90488d8343b958d545cd1fa98289350857597f74703e3e7713732ed22080ddbbb6dc2c6f516ad5840e9bed85173

  • SSDEEP

    49152:1tbIwL5D4Jc+b01tnAyB63TANQnMEx6Te8wTVDmg27RnWGj:DkPbiHW6ZCD527BWG

Score
7/10

Malware Config

Targets

    • Target

      2024-05-22_6edc9f7af1d66c343065d3880f204bfa_ryuk

    • Size

      2.8MB

    • MD5

      6edc9f7af1d66c343065d3880f204bfa

    • SHA1

      45fbb90552272afef193e4830273920b0f1c49c2

    • SHA256

      ed2d38577d34fe2f21998dd9e672246515c59559265346f6ff32ac83256d0ae2

    • SHA512

      991715b9c77a0d724dd5bc4de0c32d93b478f90488d8343b958d545cd1fa98289350857597f74703e3e7713732ed22080ddbbb6dc2c6f516ad5840e9bed85173

    • SSDEEP

      49152:1tbIwL5D4Jc+b01tnAyB63TANQnMEx6Te8wTVDmg27RnWGj:DkPbiHW6ZCD527BWG

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks