General

  • Target
    2024-11-09_6014da73b640f8c78e7e31e7af63dd01_cobalt-strike_ryuk
  • Size 1.8MB
  • Sample241109-197ypswpbk
  • SHA256 789724d85a314d962e8e9526d98bb6ea752f41287b0c3b92d9c51025f5c806f8
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      2024-11-09_6014da73b640f8c78e7e31e7af63dd01_cobalt-strike_ryuk
    • Size 1.8MB
    • SHA256 789724d85a314d962e8e9526d98bb6ea752f41287b0c3b92d9c51025f5c806f8
    • MD5 SHA1 SHA512 SSDEEP
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks