General

  • Target

    2024-05-24_232ed512dbaaeaf107fdc4a445cb3d1e_ryuk

  • Size

    5.5MB

  • Sample

    240524-vzshdadf65

  • MD5

    232ed512dbaaeaf107fdc4a445cb3d1e

  • SHA1

    1855a7087e28a3b587b5cd5a59b785aafbb719bc

  • SHA256

    06f4f69313825895d95a88f5da4dd5ba13a272a8a3c4622b6e4da8d9a76a5df5

  • SHA512

    b5544cbf7b43f67ae409f4e3f81f4a3673bd5c4ec8f05eda74fa2bc517ff9b0876bea89f0babce4fa11301f0adb73de59dcc7d0bfc5cd900cbd95fe15a05cb18

  • SSDEEP

    49152:jEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfv:/AI5pAdVJn9tbnR1VgBVmpnlS

Score
7/10

Malware Config

Targets

    • Target

      2024-05-24_232ed512dbaaeaf107fdc4a445cb3d1e_ryuk

    • Size

      5.5MB

    • MD5

      232ed512dbaaeaf107fdc4a445cb3d1e

    • SHA1

      1855a7087e28a3b587b5cd5a59b785aafbb719bc

    • SHA256

      06f4f69313825895d95a88f5da4dd5ba13a272a8a3c4622b6e4da8d9a76a5df5

    • SHA512

      b5544cbf7b43f67ae409f4e3f81f4a3673bd5c4ec8f05eda74fa2bc517ff9b0876bea89f0babce4fa11301f0adb73de59dcc7d0bfc5cd900cbd95fe15a05cb18

    • SSDEEP

      49152:jEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfv:/AI5pAdVJn9tbnR1VgBVmpnlS

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

4
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks