General

  • Target

    2024-05-24_8820dfa2ecc6d455b9cdeb76c0fd4980_ryuk

  • Size

    5.5MB

  • Sample

    240524-1hdksaca3z

  • MD5

    8820dfa2ecc6d455b9cdeb76c0fd4980

  • SHA1

    ac948e9f7756886f650bb5adf1a379471fab4057

  • SHA256

    b04a52f1c888caaac2ffd73a97fa2e4320909baf142a3d26e121ac9718f72dc3

  • SHA512

    1268bb1658647534c096cc63701b5aed6d52226b2d305daec2006c2e36c329300b76b98306ac888052ceae5eae594ae388244b664357961fb7e9b286b0ad6326

  • SSDEEP

    49152:nEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfT:zAI5pAdVJn9tbnR1VgBVmhDb0

Score
7/10

Malware Config

Targets

    • Target

      2024-05-24_8820dfa2ecc6d455b9cdeb76c0fd4980_ryuk

    • Size

      5.5MB

    • MD5

      8820dfa2ecc6d455b9cdeb76c0fd4980

    • SHA1

      ac948e9f7756886f650bb5adf1a379471fab4057

    • SHA256

      b04a52f1c888caaac2ffd73a97fa2e4320909baf142a3d26e121ac9718f72dc3

    • SHA512

      1268bb1658647534c096cc63701b5aed6d52226b2d305daec2006c2e36c329300b76b98306ac888052ceae5eae594ae388244b664357961fb7e9b286b0ad6326

    • SSDEEP

      49152:nEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfT:zAI5pAdVJn9tbnR1VgBVmhDb0

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

4
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks