General

  • Target

    2024-08-08_df528346fa431e1e0de2c0535b46efa4_cobalt-strike_ryuk

  • Size

    3.5MB

  • Sample

    240808-smsw9syfkh

  • MD5

    df528346fa431e1e0de2c0535b46efa4

  • SHA1

    c6bd2bfd799e89a147d0058036f148120de7f2e7

  • SHA256

    1dda474afd7d9ca242a6711a7be2ac963cfd9c3fc444d24a8e6fcd42e4cccf09

  • SHA512

    db15ed52c40e12665a461cd8888843656f640dd5665514ed93e73d7e5ba37755dd2810caa69721f67e12a362d2ffc788a04dcc1e88e1d4f07cf6c852e1514220

  • SSDEEP

    49152:nyN8cXQNJAR87cy2QE7l5gUdwOr6enxsQPiqsWA1qOCDmg27RnWGj:cgtw7LgUdrrrD527BWG

Score
7/10

Malware Config

Targets

    • Target

      2024-08-08_df528346fa431e1e0de2c0535b46efa4_cobalt-strike_ryuk

    • Size

      3.5MB

    • MD5

      df528346fa431e1e0de2c0535b46efa4

    • SHA1

      c6bd2bfd799e89a147d0058036f148120de7f2e7

    • SHA256

      1dda474afd7d9ca242a6711a7be2ac963cfd9c3fc444d24a8e6fcd42e4cccf09

    • SHA512

      db15ed52c40e12665a461cd8888843656f640dd5665514ed93e73d7e5ba37755dd2810caa69721f67e12a362d2ffc788a04dcc1e88e1d4f07cf6c852e1514220

    • SSDEEP

      49152:nyN8cXQNJAR87cy2QE7l5gUdwOr6enxsQPiqsWA1qOCDmg27RnWGj:cgtw7LgUdrrrD527BWG

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks