General

  • Target

    2024-06-08_5e20a4c132ddd0c976fe8c7bbd6d82cf_ryuk

  • Size

    5.5MB

  • Sample

    240608-zen2nsfh6y

  • MD5

    5e20a4c132ddd0c976fe8c7bbd6d82cf

  • SHA1

    a78adde6af0d41f5e8f3e56d01003495e1e9a5ed

  • SHA256

    4ae49e407c60276896ba47fb5ce4945ab90a0a883e933df179165cb075c650e6

  • SHA512

    6de225d1e55a132c76fe428da161d66d6f69b64dec78544e3ac7b36fad6e3602c09b96db0e62d34782c64531e3afcf9237a7ceb22e86a0a81c6e610424f8d28e

  • SSDEEP

    49152:lEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfY:5AI5pAdVJn9tbnR1VgBVmyPHn3

Score
7/10

Malware Config

Targets

    • Target

      2024-06-08_5e20a4c132ddd0c976fe8c7bbd6d82cf_ryuk

    • Size

      5.5MB

    • MD5

      5e20a4c132ddd0c976fe8c7bbd6d82cf

    • SHA1

      a78adde6af0d41f5e8f3e56d01003495e1e9a5ed

    • SHA256

      4ae49e407c60276896ba47fb5ce4945ab90a0a883e933df179165cb075c650e6

    • SHA512

      6de225d1e55a132c76fe428da161d66d6f69b64dec78544e3ac7b36fad6e3602c09b96db0e62d34782c64531e3afcf9237a7ceb22e86a0a81c6e610424f8d28e

    • SSDEEP

      49152:lEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfY:5AI5pAdVJn9tbnR1VgBVmyPHn3

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks