General

  • Target
    2024-10-22_7b31a6e8fd74c0c5b7de75d14b5c9869_cobalt-strike_ryuk
  • Size 1.8MB
  • Sample241022-ejjbrswbqe
  • SHA256 33a113c9abd6979683c124ea981772968bd40d1187fa3120920e66986c95ff1d
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      2024-10-22_7b31a6e8fd74c0c5b7de75d14b5c9869_cobalt-strike_ryuk
    • Size 1.8MB
    • SHA256 33a113c9abd6979683c124ea981772968bd40d1187fa3120920e66986c95ff1d
    • MD5 SHA1 SHA512 SSDEEP
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks