General

  • Target

    2024-06-02_46253377db39227a49fe1ebb50cb6e98_ryuk

  • Size

    5.5MB

  • Sample

    240602-qvyflsee79

  • MD5

    46253377db39227a49fe1ebb50cb6e98

  • SHA1

    6870050890ef82e979490c659cfc8d2ce7da551e

  • SHA256

    3e527ba8da88d2fdf91564359a8d046c48bcefd38eeae3d2daac53f948034715

  • SHA512

    907fd971724d277db2204a2e2d116b6bb7bb19faaccc2ad7dd7900ba79a04fe1b3f05a6506ceff8f9906a0a268f261d36097fff58620b57b6618e2a28729f6d9

  • SSDEEP

    49152:dEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfh:hAI5pAdVJn9tbnR1VgBVmnqo4w

Score
7/10

Malware Config

Targets

    • Target

      2024-06-02_46253377db39227a49fe1ebb50cb6e98_ryuk

    • Size

      5.5MB

    • MD5

      46253377db39227a49fe1ebb50cb6e98

    • SHA1

      6870050890ef82e979490c659cfc8d2ce7da551e

    • SHA256

      3e527ba8da88d2fdf91564359a8d046c48bcefd38eeae3d2daac53f948034715

    • SHA512

      907fd971724d277db2204a2e2d116b6bb7bb19faaccc2ad7dd7900ba79a04fe1b3f05a6506ceff8f9906a0a268f261d36097fff58620b57b6618e2a28729f6d9

    • SSDEEP

      49152:dEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfh:hAI5pAdVJn9tbnR1VgBVmnqo4w

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks