General

  • Target

    2024-06-02_4ccac72cad9e520ac864e1f2f5d1df2b_ryuk

  • Size

    5.5MB

  • Sample

    240602-sesarsga74

  • MD5

    4ccac72cad9e520ac864e1f2f5d1df2b

  • SHA1

    2f3b4837f74ac433c2424d9346a0a4dd54bf3803

  • SHA256

    f9c385d8aa864e99ce3d0ec1fd952cddf613c0abaefb657f6cd1d33cc2412f42

  • SHA512

    c279a62989a9c7ffa37ed56ff7b2d99f534461a1287a8ab45c57ad1a5b8a67ef27269f71d233a628f77f216412fae7025915853e8fe88b2b75e0498b2c043b06

  • SSDEEP

    49152:kEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1bn9tJEUxDG0BYYrLA50IHLGfW:CAI5pAdV9n9tbnR1VgBVmP7hYIL8

Score
7/10

Malware Config

Targets

    • Target

      2024-06-02_4ccac72cad9e520ac864e1f2f5d1df2b_ryuk

    • Size

      5.5MB

    • MD5

      4ccac72cad9e520ac864e1f2f5d1df2b

    • SHA1

      2f3b4837f74ac433c2424d9346a0a4dd54bf3803

    • SHA256

      f9c385d8aa864e99ce3d0ec1fd952cddf613c0abaefb657f6cd1d33cc2412f42

    • SHA512

      c279a62989a9c7ffa37ed56ff7b2d99f534461a1287a8ab45c57ad1a5b8a67ef27269f71d233a628f77f216412fae7025915853e8fe88b2b75e0498b2c043b06

    • SSDEEP

      49152:kEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1bn9tJEUxDG0BYYrLA50IHLGfW:CAI5pAdV9n9tbnR1VgBVmP7hYIL8

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks