General

  • Target

    2024-07-07_9c0e355fd91487af386f20e035a285dd_ryuk

  • Size

    4.6MB

  • Sample

    240707-ll8g1ayekp

  • MD5

    9c0e355fd91487af386f20e035a285dd

  • SHA1

    de1ddb68dc433494caf9a632e2b3c15bb91525db

  • SHA256

    df6d9e590dd9e66153c7b39770a772606bba785875556c84017d62e247aa330d

  • SHA512

    2a4a1083dfca85c70d087cccd5c690cc781350bf558a106b8431b6cdf0a295cdc96143eb423b4f5a4c44a3c7d22e4195a5ac0efdd78af07ae7a6d7d32b3cf611

  • SSDEEP

    49152:bvuURFfSjB2ZAKQKIFihKwDOhIYz9RtHBDWeTg8iqSkwER4a1HecEPLcDmg27RnN:DSDiKwyhx4BER3AID527BWG

Malware Config

Targets

    • Target

      2024-07-07_9c0e355fd91487af386f20e035a285dd_ryuk

    • Size

      4.6MB

    • MD5

      9c0e355fd91487af386f20e035a285dd

    • SHA1

      de1ddb68dc433494caf9a632e2b3c15bb91525db

    • SHA256

      df6d9e590dd9e66153c7b39770a772606bba785875556c84017d62e247aa330d

    • SHA512

      2a4a1083dfca85c70d087cccd5c690cc781350bf558a106b8431b6cdf0a295cdc96143eb423b4f5a4c44a3c7d22e4195a5ac0efdd78af07ae7a6d7d32b3cf611

    • SSDEEP

      49152:bvuURFfSjB2ZAKQKIFihKwDOhIYz9RtHBDWeTg8iqSkwER4a1HecEPLcDmg27RnN:DSDiKwyhx4BER3AID527BWG

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks