General

  • Target

    2024-05-23_0974f1d34033d4a8f8b2c895a8d7b613_ryuk

  • Size

    4.6MB

  • Sample

    240523-mhpfdsdb34

  • MD5

    0974f1d34033d4a8f8b2c895a8d7b613

  • SHA1

    85a3ef939652c176a3fe949d41436fcfb3d37125

  • SHA256

    933ea56debd89d35a39a6b416f3ad4217bb584f4e93660c9be7d396e7a2d080d

  • SHA512

    e0b6472e48b78e5efee6fe6f1c577cdcc86bbbfca006a503c7d9dd4b6577f59a85c9634f9c0e11ce06557c635f1655cc959823dd26c044c88ab786c014637e1b

  • SSDEEP

    49152:3ndPjazwYcCOlBWD9rqGfi0iIGTHI6DOnIIeNxu6xl1aZt6m5xbzDI6bpsRJrAGO:/2D86iFIIm3Gob5AccD527BWG

Score
7/10

Malware Config

Targets

    • Target

      2024-05-23_0974f1d34033d4a8f8b2c895a8d7b613_ryuk

    • Size

      4.6MB

    • MD5

      0974f1d34033d4a8f8b2c895a8d7b613

    • SHA1

      85a3ef939652c176a3fe949d41436fcfb3d37125

    • SHA256

      933ea56debd89d35a39a6b416f3ad4217bb584f4e93660c9be7d396e7a2d080d

    • SHA512

      e0b6472e48b78e5efee6fe6f1c577cdcc86bbbfca006a503c7d9dd4b6577f59a85c9634f9c0e11ce06557c635f1655cc959823dd26c044c88ab786c014637e1b

    • SSDEEP

      49152:3ndPjazwYcCOlBWD9rqGfi0iIGTHI6DOnIIeNxu6xl1aZt6m5xbzDI6bpsRJrAGO:/2D86iFIIm3Gob5AccD527BWG

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

4
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks