General

  • Target

    2024-05-29_b920b6ffe9615e5e9ba8702e99e297b7_ryuk

  • Size

    5.5MB

  • Sample

    240529-j5yqssgc3y

  • MD5

    b920b6ffe9615e5e9ba8702e99e297b7

  • SHA1

    80deec918ac1f5e0bbf8da6f9ef8048db4d17195

  • SHA256

    fd7166b21532e91e5fdf81d87babf87ed11b62a03722f1caba3938607f880975

  • SHA512

    0ae0435e4181ab73fce641d8ef6c60229d7ee64c1925fc8dd8f39c19b55584c89e286099b003cba5a5a88676359720196c9eb328c32166a971b09aa76fafe587

  • SSDEEP

    98304:dAI5pAdVJn9tbnR1VgBVmdUyuFC4Qmd1:dAsCh7XYwQ/

Score
7/10

Malware Config

Targets

    • Target

      2024-05-29_b920b6ffe9615e5e9ba8702e99e297b7_ryuk

    • Size

      5.5MB

    • MD5

      b920b6ffe9615e5e9ba8702e99e297b7

    • SHA1

      80deec918ac1f5e0bbf8da6f9ef8048db4d17195

    • SHA256

      fd7166b21532e91e5fdf81d87babf87ed11b62a03722f1caba3938607f880975

    • SHA512

      0ae0435e4181ab73fce641d8ef6c60229d7ee64c1925fc8dd8f39c19b55584c89e286099b003cba5a5a88676359720196c9eb328c32166a971b09aa76fafe587

    • SSDEEP

      98304:dAI5pAdVJn9tbnR1VgBVmdUyuFC4Qmd1:dAsCh7XYwQ/

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks