General

  • Target

    2024-05-24_06c9131b3614e27f8834030c8d9239de_ryuk

  • Size

    1.0MB

  • Sample

    240524-q247qsgb98

  • MD5

    06c9131b3614e27f8834030c8d9239de

  • SHA1

    a4321eae8f936ac84ada991307db78d583e41548

  • SHA256

    fdcb926b59493735a40ad36a2d3b03bb276b78a5f68a9d0705afa31dd5824345

  • SHA512

    b4ed32bae9d78ffa434059e0930d461605f10bc3624c495ca756c098075a0042ce2085eeb404b06333b57dae4a442d7b770c11abd443137a2329806dc9550b63

  • SSDEEP

    24576:46V6VC/AyqGizWCaFby68NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:46cbGizWCaFbLgDUYmvFur31yAipQCt3

Score
7/10

Malware Config

Targets

    • Target

      2024-05-24_06c9131b3614e27f8834030c8d9239de_ryuk

    • Size

      1.0MB

    • MD5

      06c9131b3614e27f8834030c8d9239de

    • SHA1

      a4321eae8f936ac84ada991307db78d583e41548

    • SHA256

      fdcb926b59493735a40ad36a2d3b03bb276b78a5f68a9d0705afa31dd5824345

    • SHA512

      b4ed32bae9d78ffa434059e0930d461605f10bc3624c495ca756c098075a0042ce2085eeb404b06333b57dae4a442d7b770c11abd443137a2329806dc9550b63

    • SSDEEP

      24576:46V6VC/AyqGizWCaFby68NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:46cbGizWCaFbLgDUYmvFur31yAipQCt3

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks