General

  • Target

    2024-05-24_494b73bd6c426a5aead7c7d7488dc127_ryuk

  • Size

    5.5MB

  • Sample

    240524-wdvw2sdg51

  • MD5

    494b73bd6c426a5aead7c7d7488dc127

  • SHA1

    685bc7bd7d21453b901a4a10bf2eca0afb3bcf0b

  • SHA256

    f3d86a157d1e8d777dfdd7c40c3a71b7aa661551c68d126a3ca3ca5530bc49c7

  • SHA512

    7b2df709e8bf193dc983fba2e142a17f6e40c5ee59b16cb5faa1b9213d5f744622f2609b8802d341ad5975f29240fb5203533d01bbc66f408d7022bbf384a4fc

  • SSDEEP

    49152:REFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGf+:VAI5pAdVJn9tbnR1VgBVmGOkf

Score
7/10

Malware Config

Targets

    • Target

      2024-05-24_494b73bd6c426a5aead7c7d7488dc127_ryuk

    • Size

      5.5MB

    • MD5

      494b73bd6c426a5aead7c7d7488dc127

    • SHA1

      685bc7bd7d21453b901a4a10bf2eca0afb3bcf0b

    • SHA256

      f3d86a157d1e8d777dfdd7c40c3a71b7aa661551c68d126a3ca3ca5530bc49c7

    • SHA512

      7b2df709e8bf193dc983fba2e142a17f6e40c5ee59b16cb5faa1b9213d5f744622f2609b8802d341ad5975f29240fb5203533d01bbc66f408d7022bbf384a4fc

    • SSDEEP

      49152:REFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGf+:VAI5pAdVJn9tbnR1VgBVmGOkf

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

4
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks