General
- Target 2026-05-18_b73c26cb30b836257642358e0bc64ac4_icedid_njrat_ryuk
- Size 674KB
- Sample260518-e8ckhsfz6z
- SHA256 15d94bb7e2be30d1cdca301ae1e502c384007dc4fb3aff1e65d9d70d86bcb04a
- MD5 b73c26cb30b836257642358e0bc64ac4
- SHA1 13298e0f0922db224a3bcd3fbd9278670ccad775
- SHA512 d3c1fc1e852d054524c738c7117d5e008d35e670f538479efa8915e941c8a8b4c93cc121f98d5880b876b51308984e251bf5d28a4a1f83d4eac2cddde7eb3ba4
- SSDEEP 12288:Ys9pt2OSoCU5qJSr1ehJeU3hviNaxJIEMmgsA0HUzTsh0NC2gMmcJ:FNSoCU5qJSr1ehJeQiaxJIEMmgsNeTdv
- TLSH T1F2E49D9A77A056F5E17BC23DCA524A55EA7378024720A24F03EA43AB1F133611F7F726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-18_b73c26cb30b836257642358e0bc64ac4_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-18_b73c26cb30b836257642358e0bc64ac4_icedid_njrat_ryuk.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-18_b73c26cb30b836257642358e0bc64ac4_icedid_njrat_ryuk
- Size 674KB
- SHA256 15d94bb7e2be30d1cdca301ae1e502c384007dc4fb3aff1e65d9d70d86bcb04a
- MD5 b73c26cb30b836257642358e0bc64ac4
- SHA1 13298e0f0922db224a3bcd3fbd9278670ccad775
- SHA512 d3c1fc1e852d054524c738c7117d5e008d35e670f538479efa8915e941c8a8b4c93cc121f98d5880b876b51308984e251bf5d28a4a1f83d4eac2cddde7eb3ba4
- SSDEEP 12288:Ys9pt2OSoCU5qJSr1ehJeU3hviNaxJIEMmgsA0HUzTsh0NC2gMmcJ:FNSoCU5qJSr1ehJeQiaxJIEMmgsNeTdv
- TLSH T1F2E49D9A77A056F5E17BC23DCA524A55EA7378024720A24F03EA43AB1F133611F7F726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.