General

  • Target

    2024-07-09_1763928924266eac75fb2e87a2fc64c7_ryuk

  • Size

    4.6MB

  • Sample

    240709-r6k54ayfjj

  • MD5

    1763928924266eac75fb2e87a2fc64c7

  • SHA1

    31953640944fbaa9497dc6e65bd7191095eceb22

  • SHA256

    ccd2aec9bd1c2de38725a8d5e6ab51422ca7ce70d6764680e0e1fd7db36bdd64

  • SHA512

    95d582a2719c84087bf38906d6a051e9e7b1f2cb6de528e44225871e27a9eeea6b32aaa85f51c8dcf14dde8a6237ea9a2b8ec5254c3ac718bb4cd41afea143cd

  • SSDEEP

    49152:VndPjazwYcCOlBWD9rqGZi0iIGTHI6DOnIIeNxu6xl1aZt6m5xbzDI6bpsRJrAGM:h2D8siFIIm3Gob5iE8EnW6at

Score
7/10

Malware Config

Targets

    • Target

      2024-07-09_1763928924266eac75fb2e87a2fc64c7_ryuk

    • Size

      4.6MB

    • MD5

      1763928924266eac75fb2e87a2fc64c7

    • SHA1

      31953640944fbaa9497dc6e65bd7191095eceb22

    • SHA256

      ccd2aec9bd1c2de38725a8d5e6ab51422ca7ce70d6764680e0e1fd7db36bdd64

    • SHA512

      95d582a2719c84087bf38906d6a051e9e7b1f2cb6de528e44225871e27a9eeea6b32aaa85f51c8dcf14dde8a6237ea9a2b8ec5254c3ac718bb4cd41afea143cd

    • SSDEEP

      49152:VndPjazwYcCOlBWD9rqGZi0iIGTHI6DOnIIeNxu6xl1aZt6m5xbzDI6bpsRJrAGM:h2D8siFIIm3Gob5iE8EnW6at

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks