General

  • Target

    2024-06-01_0d0d9658e9f91cc3e7d031993c7cdb2c_ryuk

  • Size

    5.5MB

  • Sample

    240601-g53zeadc89

  • MD5

    0d0d9658e9f91cc3e7d031993c7cdb2c

  • SHA1

    d7d8e1657e38c024259152c35a59e60798c3dfbe

  • SHA256

    ca7f77fdd892ea789accbb10d8e86bea8ed72cacd353011961c08e4990410595

  • SHA512

    f591c8fc3c64411a0ad84aa3278adab8ccf9b6bfda1559047b9048a8da32ad58a2861be691a7abd85021ba33baed409281cdbff4dee1ecf695d5562a604ec6b0

  • SSDEEP

    98304:wAI5pAdVJn9tbnR1VgBVm070uMhSBrkNq:wAsCh7XYTIoQ

Score
7/10

Malware Config

Targets

    • Target

      2024-06-01_0d0d9658e9f91cc3e7d031993c7cdb2c_ryuk

    • Size

      5.5MB

    • MD5

      0d0d9658e9f91cc3e7d031993c7cdb2c

    • SHA1

      d7d8e1657e38c024259152c35a59e60798c3dfbe

    • SHA256

      ca7f77fdd892ea789accbb10d8e86bea8ed72cacd353011961c08e4990410595

    • SHA512

      f591c8fc3c64411a0ad84aa3278adab8ccf9b6bfda1559047b9048a8da32ad58a2861be691a7abd85021ba33baed409281cdbff4dee1ecf695d5562a604ec6b0

    • SSDEEP

      98304:wAI5pAdVJn9tbnR1VgBVm070uMhSBrkNq:wAsCh7XYTIoQ

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks