bde097d26757e9540b918b328478bb9885140117bd0cff9c2048dfecbcded64a | Triage

Sharing

General

Target

2024-05-27_832d0dd98fec7fd8fe117229c5e7b44a_ryuk
Size

2.2MB
Sample

240527-p8nb5adc8s
MD5

832d0dd98fec7fd8fe117229c5e7b44a
SHA1

b3a76825f1d7db705f2bd7c96096368363842317
SHA256

bde097d26757e9540b918b328478bb9885140117bd0cff9c2048dfecbcded64a
SHA512

2cab5fcd347fed2c4e8b2dd1f7847a6106254cad2e22d5ec239fc3a62098c7f6174b2a7bb3b8ceb7963dbfa635d3b7385050a9ba8270cfaaec1cc0f35a136493
SSDEEP

24576:YOObVw4TaN1wdFukCba4oXtgLhU3wEdmh58IMdIuwe3zfIe7xmvH/:YOOh3aN4FuLbegmtGTMdFrIe78vH/

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  2024-05-27_832d0dd98fec7fd8fe117229c5e7b44a_ryuk
- Size
  
  2.2MB
- MD5
  
  832d0dd98fec7fd8fe117229c5e7b44a
- SHA1
  
  b3a76825f1d7db705f2bd7c96096368363842317
- SHA256
  
  bde097d26757e9540b918b328478bb9885140117bd0cff9c2048dfecbcded64a
- SHA512
  
  2cab5fcd347fed2c4e8b2dd1f7847a6106254cad2e22d5ec239fc3a62098c7f6174b2a7bb3b8ceb7963dbfa635d3b7385050a9ba8270cfaaec1cc0f35a136493
- SSDEEP
  
  24576:YOObVw4TaN1wdFukCba4oXtgLhU3wEdmh58IMdIuwe3zfIe7xmvH/:YOOh3aN4FuLbegmtGTMdFrIe78vH/
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2