General

  • Target

    2024-07-10_d07925b95e413403bb758ecfb721d590_ryuk

  • Size

    4.6MB

  • Sample

    240710-b27was1ama

  • MD5

    d07925b95e413403bb758ecfb721d590

  • SHA1

    4f8c6e17c68ed05309c26faea7bd158da63d1712

  • SHA256

    c74a5a6bf6ac1b5d3b7999b96f12877f730442411c15fa5b8f7905b59f80c7e8

  • SHA512

    cd304b55d1609cc2aa07981a18954cdd9a98844bcb0684d80b704ad96e94e82283b4795a0fb7e8d373cb1208484f37d9fd1508aa309e9ad681940c3ef2e791bc

  • SSDEEP

    49152:8vuURFfSjB2ZAKQKIFihcwDOhIYz9RtHBDWeTg8iqSkwER4a1HecEPLOzDOQ0K:+SDicwyhx4BER3AeDb0

Malware Config

Targets

    • Target

      2024-07-10_d07925b95e413403bb758ecfb721d590_ryuk

    • Size

      4.6MB

    • MD5

      d07925b95e413403bb758ecfb721d590

    • SHA1

      4f8c6e17c68ed05309c26faea7bd158da63d1712

    • SHA256

      c74a5a6bf6ac1b5d3b7999b96f12877f730442411c15fa5b8f7905b59f80c7e8

    • SHA512

      cd304b55d1609cc2aa07981a18954cdd9a98844bcb0684d80b704ad96e94e82283b4795a0fb7e8d373cb1208484f37d9fd1508aa309e9ad681940c3ef2e791bc

    • SSDEEP

      49152:8vuURFfSjB2ZAKQKIFihcwDOhIYz9RtHBDWeTg8iqSkwER4a1HecEPLOzDOQ0K:+SDicwyhx4BER3AeDb0

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks