fcd1d498f4d706fd607b6bfba817e0668e7d43cd4eeb7c0f9a3a952e05f3bfe2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-07_d5099a5fcca6af400afbdebf72699008_ryuk
Size

4.6MB
Sample

240607-dcyx7shf47
MD5

d5099a5fcca6af400afbdebf72699008
SHA1

71d122cd8951260a94d673a9845776274736a157
SHA256

fcd1d498f4d706fd607b6bfba817e0668e7d43cd4eeb7c0f9a3a952e05f3bfe2
SHA512

8450ea49933c6cdd8325f4def5c37010b781cb2fceff339ffb20749749f20e2693753c950bc8b4e8502fbba50c9865e4be19b08b375ba7c85f00759f74d99086
SSDEEP

49152:KndPjazwYcCOlBWD9rqGZi0iIGTHI6DOnIIeNxu6xl1aZt6m5xbzDI6bpsRJrAGK:A2D8siFIIm3Gob5iE8qj2FAQL

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  2024-06-07_d5099a5fcca6af400afbdebf72699008_ryuk
- Size
  
  4.6MB
- MD5
  
  d5099a5fcca6af400afbdebf72699008
- SHA1
  
  71d122cd8951260a94d673a9845776274736a157
- SHA256
  
  fcd1d498f4d706fd607b6bfba817e0668e7d43cd4eeb7c0f9a3a952e05f3bfe2
- SHA512
  
  8450ea49933c6cdd8325f4def5c37010b781cb2fceff339ffb20749749f20e2693753c950bc8b4e8502fbba50c9865e4be19b08b375ba7c85f00759f74d99086
- SSDEEP
  
  49152:KndPjazwYcCOlBWD9rqGZi0iIGTHI6DOnIIeNxu6xl1aZt6m5xbzDI6bpsRJrAGK:A2D8siFIIm3Gob5iE8qj2FAQL
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1