General

  • Target

    2024-06-03_ab110a2cd8d6e8f0505524f95c130324_ryuk

  • Size

    1.9MB

  • Sample

    240603-lnmcjsbf48

  • MD5

    ab110a2cd8d6e8f0505524f95c130324

  • SHA1

    810fff1114717cdc5f74e38163529ebb841d7d98

  • SHA256

    59141d9dd5d439d462b01de588b3e4a59728c1a9087ac52b7107afe7926c4296

  • SHA512

    f324dea44fd69d68a55855f4ffa09ad68fc4f8e9b5c726555632355ece2f529613273f1677e61118a72a89efea70e9fd5d2359c53cb12bdcdda14418a5dc86a3

  • SSDEEP

    49152:5/fQF37CGaPgxlMPdlR8v4UC0Eg6ET7M/I:l+37Ll2/V0cETQ/I

Score
7/10

Malware Config

Targets

    • Target

      2024-06-03_ab110a2cd8d6e8f0505524f95c130324_ryuk

    • Size

      1.9MB

    • MD5

      ab110a2cd8d6e8f0505524f95c130324

    • SHA1

      810fff1114717cdc5f74e38163529ebb841d7d98

    • SHA256

      59141d9dd5d439d462b01de588b3e4a59728c1a9087ac52b7107afe7926c4296

    • SHA512

      f324dea44fd69d68a55855f4ffa09ad68fc4f8e9b5c726555632355ece2f529613273f1677e61118a72a89efea70e9fd5d2359c53cb12bdcdda14418a5dc86a3

    • SSDEEP

      49152:5/fQF37CGaPgxlMPdlR8v4UC0Eg6ET7M/I:l+37Ll2/V0cETQ/I

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks