General

  • Target

    2024-06-30_fb9ffff6d4bf70231057af10513ec6c9_ryuk

  • Size

    2.1MB

  • Sample

    240630-vllsnsvaqj

  • MD5

    fb9ffff6d4bf70231057af10513ec6c9

  • SHA1

    a4cd5cf9efdaaf51f8e9ea12f92397e0d12aa185

  • SHA256

    4fd491680e0311eccd08434b4eaae73e26a699adfabc420693085ee3360cb22b

  • SHA512

    e8cfec75b84121f60b714e4712ea874121907ac884c545eec5696269d7704938f09bb0773ab8802b85002b0dc27e7a8241a8873c6c4cd6322bb2ce796c1a4e50

  • SSDEEP

    49152:JjFX33t4INlfTqkUMLu/52bulcI1wXZTBz5kaB0zj0yjoB2:J7fTqmeX1QB2Yyjl

Score
7/10

Malware Config

Targets

    • Target

      2024-06-30_fb9ffff6d4bf70231057af10513ec6c9_ryuk

    • Size

      2.1MB

    • MD5

      fb9ffff6d4bf70231057af10513ec6c9

    • SHA1

      a4cd5cf9efdaaf51f8e9ea12f92397e0d12aa185

    • SHA256

      4fd491680e0311eccd08434b4eaae73e26a699adfabc420693085ee3360cb22b

    • SHA512

      e8cfec75b84121f60b714e4712ea874121907ac884c545eec5696269d7704938f09bb0773ab8802b85002b0dc27e7a8241a8873c6c4cd6322bb2ce796c1a4e50

    • SSDEEP

      49152:JjFX33t4INlfTqkUMLu/52bulcI1wXZTBz5kaB0zj0yjoB2:J7fTqmeX1QB2Yyjl

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks