General

  • Target

    2024-05-31_907d37d3930586a99c286003fd33dcb0_ryuk

  • Size

    5.5MB

  • Sample

    240531-z9b1laeg27

  • MD5

    907d37d3930586a99c286003fd33dcb0

  • SHA1

    3745bae5d1a4986bf89c35184b6cbe2a1f01694a

  • SHA256

    3135b663db15a618d921dc9100019d52745c9be0ab90ee03c793b2b9b6d7f923

  • SHA512

    99d608291795958b3da3dee31694b37bfafcec74197a42d9774d8ad2013e3e05af3fda710886a17bcf8a505a5a61ca038dd8a8df99028492b098f91686b9dd8e

  • SSDEEP

    49152:CEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1tn9tJEUxDG0BYYrLA50IHLGfO:IAI5pAdV/n9tbnR1VgBVmW3hXmBC

Score
7/10

Malware Config

Targets

    • Target

      2024-05-31_907d37d3930586a99c286003fd33dcb0_ryuk

    • Size

      5.5MB

    • MD5

      907d37d3930586a99c286003fd33dcb0

    • SHA1

      3745bae5d1a4986bf89c35184b6cbe2a1f01694a

    • SHA256

      3135b663db15a618d921dc9100019d52745c9be0ab90ee03c793b2b9b6d7f923

    • SHA512

      99d608291795958b3da3dee31694b37bfafcec74197a42d9774d8ad2013e3e05af3fda710886a17bcf8a505a5a61ca038dd8a8df99028492b098f91686b9dd8e

    • SSDEEP

      49152:CEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1tn9tJEUxDG0BYYrLA50IHLGfO:IAI5pAdV/n9tbnR1VgBVmW3hXmBC

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks