General

  • Target

    2024-05-24_365d6cfeb83a52897cb8f7f32ac662b5_ryuk

  • Size

    5.5MB

  • Sample

    240524-tyl4jacc68

  • MD5

    365d6cfeb83a52897cb8f7f32ac662b5

  • SHA1

    5fc8e2b9ee7528c0d62c9899efbde077c04a0292

  • SHA256

    e2139bde71ed165fac768f717285c1584486d101c1691662ff015cc361920baf

  • SHA512

    e10e2e5325b40210475a1d2e2afe8db06b09b0d5dc816564df10e6ab1ba4c0a825ab90e71cce530b39dcb521cda45617e14c1a6436cf85db6f3f3d0795ddb494

  • SSDEEP

    49152:kEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfx:CAI5pAdVJn9tbnR1VgBVmS8

Score
7/10

Malware Config

Targets

    • Target

      2024-05-24_365d6cfeb83a52897cb8f7f32ac662b5_ryuk

    • Size

      5.5MB

    • MD5

      365d6cfeb83a52897cb8f7f32ac662b5

    • SHA1

      5fc8e2b9ee7528c0d62c9899efbde077c04a0292

    • SHA256

      e2139bde71ed165fac768f717285c1584486d101c1691662ff015cc361920baf

    • SHA512

      e10e2e5325b40210475a1d2e2afe8db06b09b0d5dc816564df10e6ab1ba4c0a825ab90e71cce530b39dcb521cda45617e14c1a6436cf85db6f3f3d0795ddb494

    • SSDEEP

      49152:kEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfx:CAI5pAdVJn9tbnR1VgBVmS8

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

4
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks