General

  • Target

    2024-06-25_257c11b24db7d7af89b6eb1eb7ac998e_ryuk

  • Size

    1.9MB

  • Sample

    240625-vy2dwswalq

  • MD5

    257c11b24db7d7af89b6eb1eb7ac998e

  • SHA1

    3fadf54bb95994e7a8153432e0831c6bc28f742a

  • SHA256

    3822cf33e4614553e836c6ce84989bd9fb011973eae40f95818f4d416ed6ae5e

  • SHA512

    1e2d8aa67ece080ed3b7eed0fc840087964f45117aaadf48961086f194aee16c144bd483441821502f6cdce663a1178b0dad90f39747f521e8a56e576ff524f0

  • SSDEEP

    49152:3/fQF37CGaPTgDUYmvFur31yAipQCtXxc0H:H+37BU7dG1yfpVBlH

Score
7/10

Malware Config

Targets

    • Target

      2024-06-25_257c11b24db7d7af89b6eb1eb7ac998e_ryuk

    • Size

      1.9MB

    • MD5

      257c11b24db7d7af89b6eb1eb7ac998e

    • SHA1

      3fadf54bb95994e7a8153432e0831c6bc28f742a

    • SHA256

      3822cf33e4614553e836c6ce84989bd9fb011973eae40f95818f4d416ed6ae5e

    • SHA512

      1e2d8aa67ece080ed3b7eed0fc840087964f45117aaadf48961086f194aee16c144bd483441821502f6cdce663a1178b0dad90f39747f521e8a56e576ff524f0

    • SSDEEP

      49152:3/fQF37CGaPTgDUYmvFur31yAipQCtXxc0H:H+37BU7dG1yfpVBlH

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks