General

  • Target

    2024-06-15_3d49088fe69d12f04187d67935cc2d41_ryuk

  • Size

    4.6MB

  • Sample

    240615-ss4kysyhll

  • MD5

    3d49088fe69d12f04187d67935cc2d41

  • SHA1

    28d264a4160e4ded529c75ce0a1ac06c4c33a73a

  • SHA256

    92d960a6132d2bb1f93f08306b83297f84d293db549aefdad2e8d3bcdaa76beb

  • SHA512

    4f5a8d5c9250a73c5afa0942b024a769120b3e66e9f68816a11eef7d94ff2d298e42aac7ac2b90a5a6511a07cc0cdd8e4d8bc7ff9fe53fb590dc61806fe9f8e1

  • SSDEEP

    49152:jndPjazwYcCOlBWD9rqGZi0iIGTHI6DOnIIeNxu6xl1aZt6m5xbzDI6bpsRJrAGf:72D8siFIIm3Gob5iEMqo4w

Score
7/10

Malware Config

Targets

    • Target

      2024-06-15_3d49088fe69d12f04187d67935cc2d41_ryuk

    • Size

      4.6MB

    • MD5

      3d49088fe69d12f04187d67935cc2d41

    • SHA1

      28d264a4160e4ded529c75ce0a1ac06c4c33a73a

    • SHA256

      92d960a6132d2bb1f93f08306b83297f84d293db549aefdad2e8d3bcdaa76beb

    • SHA512

      4f5a8d5c9250a73c5afa0942b024a769120b3e66e9f68816a11eef7d94ff2d298e42aac7ac2b90a5a6511a07cc0cdd8e4d8bc7ff9fe53fb590dc61806fe9f8e1

    • SSDEEP

      49152:jndPjazwYcCOlBWD9rqGZi0iIGTHI6DOnIIeNxu6xl1aZt6m5xbzDI6bpsRJrAGf:72D8siFIIm3Gob5iEMqo4w

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks