7029036b82b270ae29268d59169541b844c68a03cefd564f6dc2108081f682e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-09_32ed104b32f50e65868e330b4471e6f0_ryuk
Size

1.9MB
Sample

240609-l6hgbahh47
MD5

32ed104b32f50e65868e330b4471e6f0
SHA1

cfcf052fb9f553ce994c81224845ee1e434e79ab
SHA256

7029036b82b270ae29268d59169541b844c68a03cefd564f6dc2108081f682e8
SHA512

0651f96f0cd55d5fdfdefa78a87632dd4af69853bc263d5421e8d6df6ed299e8e30a559b751a3cd49a84d5676756facde1eb458778b0c4013545530e59ecc9e4
SSDEEP

24576:678r8FfC3F32nUnCdAaKu++nOG4+mIJz5IcuMlQHJxrDiSi:6/fQF37CGaPtisGcnlQHPxi

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  2024-06-09_32ed104b32f50e65868e330b4471e6f0_ryuk
- Size
  
  1.9MB
- MD5
  
  32ed104b32f50e65868e330b4471e6f0
- SHA1
  
  cfcf052fb9f553ce994c81224845ee1e434e79ab
- SHA256
  
  7029036b82b270ae29268d59169541b844c68a03cefd564f6dc2108081f682e8
- SHA512
  
  0651f96f0cd55d5fdfdefa78a87632dd4af69853bc263d5421e8d6df6ed299e8e30a559b751a3cd49a84d5676756facde1eb458778b0c4013545530e59ecc9e4
- SSDEEP
  
  24576:678r8FfC3F32nUnCdAaKu++nOG4+mIJz5IcuMlQHJxrDiSi:6/fQF37CGaPtisGcnlQHPxi
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1