General

  • Target

    2024-05-24_61af346ee89435cb5516086e54fc5667_ryuk

  • Size

    5.5MB

  • Sample

    240524-v2j9sadg33

  • MD5

    61af346ee89435cb5516086e54fc5667

  • SHA1

    27c20efec03db61a03561953cda4e2025adac77a

  • SHA256

    67db56f8117e92b8e3f0fd0665e170abe12a7b54223529f3e356d37feb87c9e6

  • SHA512

    ba7c4ae3882417d3c7d0021965dcfcf8ce0bd1f772bd8d4f5987974bf2255cebf288aadb7e10d90a9689bf80d66bf944f16e7b2b76dc639b112795397f38b29a

  • SSDEEP

    49152:2EFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfU:MAI5pAdVJn9tbnR1VgBVmcOkf

Score
7/10

Malware Config

Targets

    • Target

      2024-05-24_61af346ee89435cb5516086e54fc5667_ryuk

    • Size

      5.5MB

    • MD5

      61af346ee89435cb5516086e54fc5667

    • SHA1

      27c20efec03db61a03561953cda4e2025adac77a

    • SHA256

      67db56f8117e92b8e3f0fd0665e170abe12a7b54223529f3e356d37feb87c9e6

    • SHA512

      ba7c4ae3882417d3c7d0021965dcfcf8ce0bd1f772bd8d4f5987974bf2255cebf288aadb7e10d90a9689bf80d66bf944f16e7b2b76dc639b112795397f38b29a

    • SSDEEP

      49152:2EFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfU:MAI5pAdVJn9tbnR1VgBVmcOkf

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks