General

  • Target

    2024-05-27_213e977814e456dcb46b1fb6261196df_ryuk

  • Size

    5.5MB

  • Sample

    240527-xr2gesff27

  • MD5

    213e977814e456dcb46b1fb6261196df

  • SHA1

    f20ca209ca1b4fcdd9dbdde66247536ad283fec6

  • SHA256

    8da03eea5d20421aac127fae9b30b75e278979b6a32ee71fe938ffcf6a1050e5

  • SHA512

    aa300061c093c08055fb2a92d35c1583371d7e4fb8e0257862965ce6a421d24a56962683abbb404b6b61aad9d4737f1083f2f986d01540843597fe445e48f37b

  • SSDEEP

    49152:qEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfP:AAI5pAdVJn9tbnR1VgBVmMEnW6at

Score
7/10

Malware Config

Targets

    • Target

      2024-05-27_213e977814e456dcb46b1fb6261196df_ryuk

    • Size

      5.5MB

    • MD5

      213e977814e456dcb46b1fb6261196df

    • SHA1

      f20ca209ca1b4fcdd9dbdde66247536ad283fec6

    • SHA256

      8da03eea5d20421aac127fae9b30b75e278979b6a32ee71fe938ffcf6a1050e5

    • SHA512

      aa300061c093c08055fb2a92d35c1583371d7e4fb8e0257862965ce6a421d24a56962683abbb404b6b61aad9d4737f1083f2f986d01540843597fe445e48f37b

    • SSDEEP

      49152:qEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfP:AAI5pAdVJn9tbnR1VgBVmMEnW6at

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks