General

  • Target

    2024-08-08_8c352c8bc74e7df1d0595d57bd453e8b_ryuk

  • Size

    1.6MB

  • Sample

    240808-x3wejssaka

  • MD5

    8c352c8bc74e7df1d0595d57bd453e8b

  • SHA1

    0fba7a49a7f8554483d3fecb8a19c548cdca68c6

  • SHA256

    23d2ca16c7709d6103cd68d08fdda6ec77c854c374083579da9e2cc9b6a1d9c4

  • SHA512

    46790958c2ee30f50ec7004d461e23c20460b80cd829c14e4460dba52bc9fb7bee9dd369a38f61c3d4fd1dc57e9a79369ab7ad2f0cac18e5c3d018e5c90ac380

  • SSDEEP

    24576:j6V64C/AyqGizWCaFbyNSkQ/7Gb8NLEbeZ:j6c6GizWCaFb1kQ/qoLEw

Malware Config

Targets

    • Target

      2024-08-08_8c352c8bc74e7df1d0595d57bd453e8b_ryuk

    • Size

      1.6MB

    • MD5

      8c352c8bc74e7df1d0595d57bd453e8b

    • SHA1

      0fba7a49a7f8554483d3fecb8a19c548cdca68c6

    • SHA256

      23d2ca16c7709d6103cd68d08fdda6ec77c854c374083579da9e2cc9b6a1d9c4

    • SHA512

      46790958c2ee30f50ec7004d461e23c20460b80cd829c14e4460dba52bc9fb7bee9dd369a38f61c3d4fd1dc57e9a79369ab7ad2f0cac18e5c3d018e5c90ac380

    • SSDEEP

      24576:j6V64C/AyqGizWCaFbyNSkQ/7Gb8NLEbeZ:j6c6GizWCaFb1kQ/qoLEw

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks