General

  • Target

    2024-06-02_228c1ae34160fd02c4076769f0ca1089_ryuk

  • Size

    4.6MB

  • Sample

    240602-qsh8xaed29

  • MD5

    228c1ae34160fd02c4076769f0ca1089

  • SHA1

    b9555f0251dfca078b2d5b376dbc4aa3d823ae9b

  • SHA256

    e601c21ec4c629276105e248a28f0b02b571a397186f560f4fd65d8d3355cf1c

  • SHA512

    303b594a158957b7d8411de454995d1dfb2baf5030140ea023f83f89c370049a8c86d075271d58392e8f073ab3d20415a8f9a8b4f201fc382c65d6f75f024321

  • SSDEEP

    49152:PndPjazwYcCOlBWD9rqGfi0iIGTHI6DOnIIeNxu6xl1aZt6m5xbzDI6bpsRJrAGD:n2D86iFIIm3Gob5iEjTcYhyp

Score
7/10

Malware Config

Targets

    • Target

      2024-06-02_228c1ae34160fd02c4076769f0ca1089_ryuk

    • Size

      4.6MB

    • MD5

      228c1ae34160fd02c4076769f0ca1089

    • SHA1

      b9555f0251dfca078b2d5b376dbc4aa3d823ae9b

    • SHA256

      e601c21ec4c629276105e248a28f0b02b571a397186f560f4fd65d8d3355cf1c

    • SHA512

      303b594a158957b7d8411de454995d1dfb2baf5030140ea023f83f89c370049a8c86d075271d58392e8f073ab3d20415a8f9a8b4f201fc382c65d6f75f024321

    • SSDEEP

      49152:PndPjazwYcCOlBWD9rqGfi0iIGTHI6DOnIIeNxu6xl1aZt6m5xbzDI6bpsRJrAGD:n2D86iFIIm3Gob5iEjTcYhyp

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks