General

  • Target

    2024-07-05_df0ea5a90534040eec6ac7218ccf2b11_ryuk

  • Size

    4.6MB

  • Sample

    240705-x3rrcstenk

  • MD5

    df0ea5a90534040eec6ac7218ccf2b11

  • SHA1

    409b3e12f620c432f34f6b2b67232ef91a9ade84

  • SHA256

    a282672784c6bcaa5d9ff3fbd046f5543afa3ec93baf0b88068cf329e81e9087

  • SHA512

    884c915fa4e3d8546722512363e0fdff9657e17102d30f02c6fc04761807d9c14b49c10618e0903c78b609daaf2ef3a620f553f19b2b27582ba305eff3b7d125

  • SSDEEP

    49152:EndPjazwYcCOlBWD9rqGZi0iIGTHI6DOnIIeNxu6xl1aZt6m5xbzDI6bpsRJrAGe:O2D8siFIIm3Gob5iEuj2jF

Score
7/10

Malware Config

Targets

    • Target

      2024-07-05_df0ea5a90534040eec6ac7218ccf2b11_ryuk

    • Size

      4.6MB

    • MD5

      df0ea5a90534040eec6ac7218ccf2b11

    • SHA1

      409b3e12f620c432f34f6b2b67232ef91a9ade84

    • SHA256

      a282672784c6bcaa5d9ff3fbd046f5543afa3ec93baf0b88068cf329e81e9087

    • SHA512

      884c915fa4e3d8546722512363e0fdff9657e17102d30f02c6fc04761807d9c14b49c10618e0903c78b609daaf2ef3a620f553f19b2b27582ba305eff3b7d125

    • SSDEEP

      49152:EndPjazwYcCOlBWD9rqGZi0iIGTHI6DOnIIeNxu6xl1aZt6m5xbzDI6bpsRJrAGe:O2D8siFIIm3Gob5iEuj2jF

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks