General

  • Target

    2024-06-08_3d79d7a680f99ff0b5424ad9a35c11b5_ryuk

  • Size

    5.5MB

  • Sample

    240608-dtrv8aha93

  • MD5

    3d79d7a680f99ff0b5424ad9a35c11b5

  • SHA1

    a7339dd337e6d7fd05be62f70fc91707bcaf0551

  • SHA256

    5c573e6f73f38ede94a3f9f07703445f1febe4f2f94d93da49a24d5e867053f8

  • SHA512

    fe61a5330a11dbf8c1679c794e3a1f47a0e7669da253b7e2c90288929ded6d5acff8f2ca7192b13f6ac575b3dcb338789c79bb387666a625f56351c80650bde1

  • SSDEEP

    98304:2AI5pAdVJn9tbnR1VgBVmfRVlbnP9WXW7H6C:2AsCh7XYyHBVH

Score
7/10

Malware Config

Targets

    • Target

      2024-06-08_3d79d7a680f99ff0b5424ad9a35c11b5_ryuk

    • Size

      5.5MB

    • MD5

      3d79d7a680f99ff0b5424ad9a35c11b5

    • SHA1

      a7339dd337e6d7fd05be62f70fc91707bcaf0551

    • SHA256

      5c573e6f73f38ede94a3f9f07703445f1febe4f2f94d93da49a24d5e867053f8

    • SHA512

      fe61a5330a11dbf8c1679c794e3a1f47a0e7669da253b7e2c90288929ded6d5acff8f2ca7192b13f6ac575b3dcb338789c79bb387666a625f56351c80650bde1

    • SSDEEP

      98304:2AI5pAdVJn9tbnR1VgBVmfRVlbnP9WXW7H6C:2AsCh7XYyHBVH

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks