cdb9430ac898a9911b1e5bf29a13f25e739ade75aaad2e89a606024fedf94a4e | Triage

Sharing

General

Target

2024-11-19_b9c803efdede98b98d8f45661492fb8e_cobalt-strike_hijackloader_ryuk
Size

2.4MB
Sample

241119-yanpns1hmk
MD5

b9c803efdede98b98d8f45661492fb8e
SHA1

722b4056dae74239906b30e8a325cbad38b55f1c
SHA256

cdb9430ac898a9911b1e5bf29a13f25e739ade75aaad2e89a606024fedf94a4e
SHA512

c81fc9c0f9960fb2ebff61b0607bb300c0def18be89e0c5d7da159039585bccdc74145128a3c767ee5dd884ddc56dded46491a3c93d1f8858d6ef5f33195c3a2
SSDEEP

49152:GZMCDXiU6Lw3aG+IOc4SMl6tu1yy/Y8H+bl7VJEY:m3PMl6gH4RAY

Score

3^/10

spyware stealer

Malware Config

Targets

- Target
  
  2024-11-19_b9c803efdede98b98d8f45661492fb8e_cobalt-strike_hijackloader_ryuk
- Size
  
  2.4MB
- MD5
  
  b9c803efdede98b98d8f45661492fb8e
- SHA1
  
  722b4056dae74239906b30e8a325cbad38b55f1c
- SHA256
  
  cdb9430ac898a9911b1e5bf29a13f25e739ade75aaad2e89a606024fedf94a4e
- SHA512
  
  c81fc9c0f9960fb2ebff61b0607bb300c0def18be89e0c5d7da159039585bccdc74145128a3c767ee5dd884ddc56dded46491a3c93d1f8858d6ef5f33195c3a2
- SSDEEP
  
  49152:GZMCDXiU6Lw3aG+IOc4SMl6tu1yy/Y8H+bl7VJEY:m3PMl6gH4RAY
Score

3^/10

spyware stealer
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1