General

  • Target

    2024-12-21_a4f39384d2cb9e26f095cf92b213bc41_ryuk

  • Size

    1.1MB

  • Sample

    241221-r2egra1pgj

  • MD5

    a4f39384d2cb9e26f095cf92b213bc41

  • SHA1

    9c5de5a1c74020c32ab9cd19cf8a5ce20ea709c9

  • SHA256

    044336179d22626a43ae59639c3c8ce83f5ed24b4a7dc28888b5829585f9a840

  • SHA512

    ae09e4a70ac1e634c4d7f8c2d09f122cfd5e1453f725907bcc540829236504a1499f030c688246cd5b0b7ba1dac30e0d996a2857aba9063dd34798ddde0ab9d6

  • SSDEEP

    24576:7Si1SoCU5qJSr1eWPSCsP0MugC6eTOsqjnhMgeiCl7G0nehbGZpbD:7S7PLjeTiDmg27RnWGj

Malware Config

Targets

    • Target

      2024-12-21_a4f39384d2cb9e26f095cf92b213bc41_ryuk

    • Size

      1.1MB

    • MD5

      a4f39384d2cb9e26f095cf92b213bc41

    • SHA1

      9c5de5a1c74020c32ab9cd19cf8a5ce20ea709c9

    • SHA256

      044336179d22626a43ae59639c3c8ce83f5ed24b4a7dc28888b5829585f9a840

    • SHA512

      ae09e4a70ac1e634c4d7f8c2d09f122cfd5e1453f725907bcc540829236504a1499f030c688246cd5b0b7ba1dac30e0d996a2857aba9063dd34798ddde0ab9d6

    • SSDEEP

      24576:7Si1SoCU5qJSr1eWPSCsP0MugC6eTOsqjnhMgeiCl7G0nehbGZpbD:7S7PLjeTiDmg27RnWGj

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks