General

  • Target

    2024-06-27_c3a07b390ddb2e1efd5f2154a5b27918_ryuk

  • Size

    4.6MB

  • Sample

    240627-tyjcmssblq

  • MD5

    c3a07b390ddb2e1efd5f2154a5b27918

  • SHA1

    55810d9c97dbcd4004231d9752e600c4497bdf90

  • SHA256

    88d86da543a7a34289fa0f9be3442c581bab8017bd61b668d9fbebb0f8a7399f

  • SHA512

    77de1c4110474519925e6f1889c45c365861e2119a2775fccae5f2d1d017770462f60e3aed33115665291c2c1c95f7ffc3fc09c896c9bd8df3398b08375cf4f1

  • SSDEEP

    49152:kvuURFfSjB2ZAKQKIFihIwDOhIYz9RtHBDWeTg8iqSkwER4a1HecEPLQJE3jM2ce:WSDiIwyhx4BER3A4E3Xc

Malware Config

Targets

    • Target

      2024-06-27_c3a07b390ddb2e1efd5f2154a5b27918_ryuk

    • Size

      4.6MB

    • MD5

      c3a07b390ddb2e1efd5f2154a5b27918

    • SHA1

      55810d9c97dbcd4004231d9752e600c4497bdf90

    • SHA256

      88d86da543a7a34289fa0f9be3442c581bab8017bd61b668d9fbebb0f8a7399f

    • SHA512

      77de1c4110474519925e6f1889c45c365861e2119a2775fccae5f2d1d017770462f60e3aed33115665291c2c1c95f7ffc3fc09c896c9bd8df3398b08375cf4f1

    • SSDEEP

      49152:kvuURFfSjB2ZAKQKIFihIwDOhIYz9RtHBDWeTg8iqSkwER4a1HecEPLQJE3jM2ce:WSDiIwyhx4BER3A4E3Xc

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks