f66a3287102340f3305b1e7e53ac1f06cb0e0a4052e38aa0a8ad84dc8ae8820e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-28_9450cfb98d576be4f6fb48fb4f693da1_cobalt-strike_ryuk
Size

2.0MB
Sample

240928-fcssaszfmb
MD5

9450cfb98d576be4f6fb48fb4f693da1
SHA1

b79e1d8c8849267fd31ed25ba335dfb6be657062
SHA256

f66a3287102340f3305b1e7e53ac1f06cb0e0a4052e38aa0a8ad84dc8ae8820e
SHA512

b83b93a540614472d6d9918009016c63a4efdc98e932a1c3d293d19eec9a8317db0c375c2186eea2e86eb92e747ac632d0c0f0e9e4cdd6f0d1ae2d5afe5185aa
SSDEEP

49152:Idpb9+saI7MMj7IM2YRTFHDmg27RnWGj:exj7M27IqvD527BWG

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  2024-09-28_9450cfb98d576be4f6fb48fb4f693da1_cobalt-strike_ryuk
- Size
  
  2.0MB
- MD5
  
  9450cfb98d576be4f6fb48fb4f693da1
- SHA1
  
  b79e1d8c8849267fd31ed25ba335dfb6be657062
- SHA256
  
  f66a3287102340f3305b1e7e53ac1f06cb0e0a4052e38aa0a8ad84dc8ae8820e
- SHA512
  
  b83b93a540614472d6d9918009016c63a4efdc98e932a1c3d293d19eec9a8317db0c375c2186eea2e86eb92e747ac632d0c0f0e9e4cdd6f0d1ae2d5afe5185aa
- SSDEEP
  
  49152:Idpb9+saI7MMj7IM2YRTFHDmg27RnWGj:exj7M27IqvD527BWG
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1