5545e1f75a6b313606896858852ccc0fca97ad0dac1bb0d0124d1b8a9a057438 | Triage

Sharing

General

Target

2024-07-05_86ac81ae635beaa967d7a54e75c97f19_ryuk
Size

2.2MB
Sample

240705-v5bf2ssdjp
MD5

86ac81ae635beaa967d7a54e75c97f19
SHA1

6659ea8a1be67618ebde8c5a31d7a08c6848b05d
SHA256

5545e1f75a6b313606896858852ccc0fca97ad0dac1bb0d0124d1b8a9a057438
SHA512

d34f608130d5dd58252593a28fe8f899eb36008aac3716083f67f756412efabfe7ba8f3bcacccf0216e0531d0a355e9556be7ac145da38f526da1bfac1556cd3
SSDEEP

24576:eOObVw4TaN1wdFukCba4oXtgLhU3wEdmh58NsqjnhMgeiCl7G0nehbGZpbD:eOOh3aN4FuLbegmtGmDmg27RnWGj

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  2024-07-05_86ac81ae635beaa967d7a54e75c97f19_ryuk
- Size
  
  2.2MB
- MD5
  
  86ac81ae635beaa967d7a54e75c97f19
- SHA1
  
  6659ea8a1be67618ebde8c5a31d7a08c6848b05d
- SHA256
  
  5545e1f75a6b313606896858852ccc0fca97ad0dac1bb0d0124d1b8a9a057438
- SHA512
  
  d34f608130d5dd58252593a28fe8f899eb36008aac3716083f67f756412efabfe7ba8f3bcacccf0216e0531d0a355e9556be7ac145da38f526da1bfac1556cd3
- SSDEEP
  
  24576:eOObVw4TaN1wdFukCba4oXtgLhU3wEdmh58NsqjnhMgeiCl7G0nehbGZpbD:eOOh3aN4FuLbegmtGmDmg27RnWGj
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2