General

  • Target

    2024-05-31_5a8ccc109ceaf0723491d3699270e035_ryuk

  • Size

    1.1MB

  • Sample

    240531-wrtadaha58

  • MD5

    5a8ccc109ceaf0723491d3699270e035

  • SHA1

    3a6de1de2b58cedc1a8430eb1af2923c2cef75c0

  • SHA256

    9224d76f8cb61b2e7c68c0fd37db2dec4d88917678329237f3e4f042bab0c4fc

  • SHA512

    57c8aa91a83ee179eeeef694f0166ac216bdb5551065ef456109594d29d669e7c5b232eaaeea57d17e95553e4ab5321ee3cf20d7516c75f25d7678401280cf29

  • SSDEEP

    24576:YSi1SoCU5qJSr1eWPSCsP0MugC6eTsdCN/j2GLl3iFSE33b9:YS7PLjeTXN/j2U4FH

Score
7/10

Malware Config

Targets

    • Target

      2024-05-31_5a8ccc109ceaf0723491d3699270e035_ryuk

    • Size

      1.1MB

    • MD5

      5a8ccc109ceaf0723491d3699270e035

    • SHA1

      3a6de1de2b58cedc1a8430eb1af2923c2cef75c0

    • SHA256

      9224d76f8cb61b2e7c68c0fd37db2dec4d88917678329237f3e4f042bab0c4fc

    • SHA512

      57c8aa91a83ee179eeeef694f0166ac216bdb5551065ef456109594d29d669e7c5b232eaaeea57d17e95553e4ab5321ee3cf20d7516c75f25d7678401280cf29

    • SSDEEP

      24576:YSi1SoCU5qJSr1eWPSCsP0MugC6eTsdCN/j2GLl3iFSE33b9:YS7PLjeTXN/j2U4FH

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks