General

  • Target

    2024-06-12_f5077bfe9454e4aaa64b6260b7577baf_ryuk

  • Size

    1.1MB

  • Sample

    240612-tktlfs1cqb

  • MD5

    f5077bfe9454e4aaa64b6260b7577baf

  • SHA1

    d7d2885a095a3543cdc31fd35bf959225f0ce6b1

  • SHA256

    d37617b45b64291641e5c3d98f21b52514bcc8b8dcd337735db499ad11901410

  • SHA512

    b218e9511cd6f784ffd387fbf8b693563f148a86153b879d32c9527eb5e9318e037a0f9e50b5975fe7a8358ad36037d2fabbfa0d664b73e4f0c51182869c581e

  • SSDEEP

    24576:NSi1SoCU5qJSr1eWPSCsP0MugC6eTcc+pFB5z+//ufNRoZW:1S7PLjeTp+pFzz+/2fNR

Score
7/10

Malware Config

Targets

    • Target

      2024-06-12_f5077bfe9454e4aaa64b6260b7577baf_ryuk

    • Size

      1.1MB

    • MD5

      f5077bfe9454e4aaa64b6260b7577baf

    • SHA1

      d7d2885a095a3543cdc31fd35bf959225f0ce6b1

    • SHA256

      d37617b45b64291641e5c3d98f21b52514bcc8b8dcd337735db499ad11901410

    • SHA512

      b218e9511cd6f784ffd387fbf8b693563f148a86153b879d32c9527eb5e9318e037a0f9e50b5975fe7a8358ad36037d2fabbfa0d664b73e4f0c51182869c581e

    • SSDEEP

      24576:NSi1SoCU5qJSr1eWPSCsP0MugC6eTcc+pFB5z+//ufNRoZW:1S7PLjeTp+pFzz+/2fNR

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks