fc011a67befec0f2c51dea65f1a6efd7fbad87c59df01c5c45e9744bbe94d34a | Triage

Sharing

General

Target

2024-06-05_29439ca1339d14aa3951a023cc4b332e_ryuk
Size

2.2MB
Sample

240605-wfdqjsdd5s
MD5

29439ca1339d14aa3951a023cc4b332e
SHA1

b689e8acf9448c78c795873339a103aaa22aa07f
SHA256

fc011a67befec0f2c51dea65f1a6efd7fbad87c59df01c5c45e9744bbe94d34a
SHA512

c335dc7491ace0ed61be5c138dd61074f7d933cccc527710066aee62901b9a459df7f42528581d10cdd275d47210416227832bf6b534d8a49241077ccded53e4
SSDEEP

49152:COOh3aN4kuLbegmtGef9Ckt7c20+9qNxUW:kU4ku/cthfEkKK90

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  2024-06-05_29439ca1339d14aa3951a023cc4b332e_ryuk
- Size
  
  2.2MB
- MD5
  
  29439ca1339d14aa3951a023cc4b332e
- SHA1
  
  b689e8acf9448c78c795873339a103aaa22aa07f
- SHA256
  
  fc011a67befec0f2c51dea65f1a6efd7fbad87c59df01c5c45e9744bbe94d34a
- SHA512
  
  c335dc7491ace0ed61be5c138dd61074f7d933cccc527710066aee62901b9a459df7f42528581d10cdd275d47210416227832bf6b534d8a49241077ccded53e4
- SSDEEP
  
  49152:COOh3aN4kuLbegmtGef9Ckt7c20+9qNxUW:kU4ku/cthfEkKK90
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2