General

  • Target

    2024-05-24_e1eb8019559a0a7287edb537a0e1758e_ryuk

  • Size

    4.6MB

  • Sample

    240524-pe675saf93

  • MD5

    e1eb8019559a0a7287edb537a0e1758e

  • SHA1

    ee55d9e5ace7f712302de77ee4d621b05c96a3f6

  • SHA256

    fb7405d184e894ffddd44d6c99fdea049b45fcf35739367d6b4ef7e90ea27876

  • SHA512

    2960ddb033abc6ca84016cc9ddd5594f47cc6b07ba92a79e95d6bbc12114708b56f709d0f5199ebcbf149647d036ee8ddda1971a8e418e878f16369b5fd2bc09

  • SSDEEP

    49152:QndPjazwYcCOlBWD9rqGHi0iIGTHI6DOnIIeNxu6xl1aZt6m5xbzDI6bpsRJrAGW:62D8OiFIIm3Gob5AcOyjl24M1N/Fo

Score
7/10

Malware Config

Targets

    • Target

      2024-05-24_e1eb8019559a0a7287edb537a0e1758e_ryuk

    • Size

      4.6MB

    • MD5

      e1eb8019559a0a7287edb537a0e1758e

    • SHA1

      ee55d9e5ace7f712302de77ee4d621b05c96a3f6

    • SHA256

      fb7405d184e894ffddd44d6c99fdea049b45fcf35739367d6b4ef7e90ea27876

    • SHA512

      2960ddb033abc6ca84016cc9ddd5594f47cc6b07ba92a79e95d6bbc12114708b56f709d0f5199ebcbf149647d036ee8ddda1971a8e418e878f16369b5fd2bc09

    • SSDEEP

      49152:QndPjazwYcCOlBWD9rqGHi0iIGTHI6DOnIIeNxu6xl1aZt6m5xbzDI6bpsRJrAGW:62D8OiFIIm3Gob5AcOyjl24M1N/Fo

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks