General

  • Target

    2024-06-03_ea8cf33e69aa750a332345ee03b25f80_ryuk

  • Size

    2.2MB

  • Sample

    240603-epm7xaca97

  • MD5

    ea8cf33e69aa750a332345ee03b25f80

  • SHA1

    27c5ec1653106fed9d110fbeb10979114e00ca8c

  • SHA256

    4247274b1389a259c8829972ab78cd3099cde8e15aa1cf4c848e0b5756c373ff

  • SHA512

    3d0bf2abcbb05958a69f58a4bdd1a39bc05f284815b71f64ca49397c21a536bd3492ffb3ded4b46a931f83aff5bffabce6fd5aa0b11ac5fd31ebf5c0e0f35178

  • SSDEEP

    49152:UOOh3aN4kuLbegmtGv70jIpM3kiSBM29mhNq:eU4ku/ctO70uMhSBrkNq

Score
7/10

Malware Config

Targets

    • Target

      2024-06-03_ea8cf33e69aa750a332345ee03b25f80_ryuk

    • Size

      2.2MB

    • MD5

      ea8cf33e69aa750a332345ee03b25f80

    • SHA1

      27c5ec1653106fed9d110fbeb10979114e00ca8c

    • SHA256

      4247274b1389a259c8829972ab78cd3099cde8e15aa1cf4c848e0b5756c373ff

    • SHA512

      3d0bf2abcbb05958a69f58a4bdd1a39bc05f284815b71f64ca49397c21a536bd3492ffb3ded4b46a931f83aff5bffabce6fd5aa0b11ac5fd31ebf5c0e0f35178

    • SSDEEP

      49152:UOOh3aN4kuLbegmtGv70jIpM3kiSBM29mhNq:eU4ku/ctO70uMhSBrkNq

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks