General

  • Target

    2024-06-11_09dc41b509137010045d5f136b4a3482_ryuk

  • Size

    1.1MB

  • Sample

    240611-bfs51sydkn

  • MD5

    09dc41b509137010045d5f136b4a3482

  • SHA1

    78304e9c49c9351ddf3385a1502a77616f2f77e6

  • SHA256

    4f3da9997e7c6353fd39f8ad2dfb9329478d7075633617e0c3cef2c72de2094f

  • SHA512

    56bfd55e92c166893ce995f377b51e979398846d7292cbbda5023a37da8672ec149e929248e0c1763f9c3f11c066c7dd949a5f79322ef4769a10d33c6d26fe81

  • SSDEEP

    24576:zSi1SoCU5qJSr1eWPSCsP0MugC6eTRDscnTL5g4rTeP0j/Viwlx:jS7PLjeTRYcTFBcg/Viwl

Score
7/10

Malware Config

Targets

    • Target

      2024-06-11_09dc41b509137010045d5f136b4a3482_ryuk

    • Size

      1.1MB

    • MD5

      09dc41b509137010045d5f136b4a3482

    • SHA1

      78304e9c49c9351ddf3385a1502a77616f2f77e6

    • SHA256

      4f3da9997e7c6353fd39f8ad2dfb9329478d7075633617e0c3cef2c72de2094f

    • SHA512

      56bfd55e92c166893ce995f377b51e979398846d7292cbbda5023a37da8672ec149e929248e0c1763f9c3f11c066c7dd949a5f79322ef4769a10d33c6d26fe81

    • SSDEEP

      24576:zSi1SoCU5qJSr1eWPSCsP0MugC6eTRDscnTL5g4rTeP0j/Viwlx:jS7PLjeTRYcTFBcg/Viwl

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks