General
- Target 2026-05-06_02a2094857bc24dca868f09f242b28de_icedid_mespinoza_njrat_ryuk
- Size 3.2MB
- Sample260506-payefadw3m
- SHA256 1f755da3e661b4243173385d3daaee76bcc546fbb79d681bb73cdaa29eba5f7b
- MD5 02a2094857bc24dca868f09f242b28de
- SHA1 e18800d506c54b544164b4016ba778b6fcec77c2
- SHA512 7290fd22a14ef9abb1f6905a9c13490024ce36dc1f512411fe36322ac2d6353e424ff8bcbc05e0ca6965c033bde230aee36417697793260eb056245b4d3d913f
- SSDEEP 24576:/e5NgcWvaU+wXVoXoDyhRXJG+OAQWmOxm0q5vYz7KEMdX6keYnAcer5:m5eca7V+dOAlmOA5dYPKEnSG
- TLSH T1A6F5C05AA77081F9D8678270C966C2B2E6F2BCCA56348B0F1650DF663F335224F2E715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-06_02a2094857bc24dca868f09f242b28de_icedid_mespinoza_njrat_ryuk.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-06_02a2094857bc24dca868f09f242b28de_icedid_mespinoza_njrat_ryuk.exe
Resource
win11-20260130-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-06_02a2094857bc24dca868f09f242b28de_icedid_mespinoza_njrat_ryuk
- Size 3.2MB
- SHA256 1f755da3e661b4243173385d3daaee76bcc546fbb79d681bb73cdaa29eba5f7b
- MD5 02a2094857bc24dca868f09f242b28de
- SHA1 e18800d506c54b544164b4016ba778b6fcec77c2
- SHA512 7290fd22a14ef9abb1f6905a9c13490024ce36dc1f512411fe36322ac2d6353e424ff8bcbc05e0ca6965c033bde230aee36417697793260eb056245b4d3d913f
- SSDEEP 24576:/e5NgcWvaU+wXVoXoDyhRXJG+OAQWmOxm0q5vYz7KEMdX6keYnAcer5:m5eca7V+dOAlmOA5dYPKEnSG
- TLSH T1A6F5C05AA77081F9D8678270C966C2B2E6F2BCCA56348B0F1650DF663F335224F2E715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory