General

  • Target
    2024-06-07_56a61ec905a38e792f1f9a8dda82a481_ryuk
  • Size 30.4MB
  • Sample240607-hpnefsda87
  • SHA256 cd6895d9d9102ea27dac2c4208dacb42efe9a21960e5794880c211726ecf3e6e
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      2024-06-07_56a61ec905a38e792f1f9a8dda82a481_ryuk
    • Size 30.4MB
    • SHA256 cd6895d9d9102ea27dac2c4208dacb42efe9a21960e5794880c211726ecf3e6e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks