General
- Target 2026-05-25_304823e43fb8bb2d8e34cf410dad406e_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260525-ffed3sa18n
- SHA256 05a8f5733a36069fe4a4a1c27909e903d76123dc52b416710a90733d8d655dfd
- MD5 304823e43fb8bb2d8e34cf410dad406e
- SHA1 5a94ddc8812ac5996bb9e07dea3c718d29dacb68
- SHA512 1a328f5cfaafdb96a1022a1547366c27bb83cf019b93ac15262c4b18ccd370002db68846aeec6beb95aa550065905c09e9f254b2ac43995a43ca321ccb31b99a
- SSDEEP 49152:rsu3Yqc97TBuO3XAL8Njmbb/zedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyg:YNcH3/zed+UsiC96Q3ou
- TLSH T10C266C03F2E941D8F0AAE2789B365732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-05-25_304823e43fb8bb2d8e34cf410dad406e_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 05a8f5733a36069fe4a4a1c27909e903d76123dc52b416710a90733d8d655dfd
- MD5 304823e43fb8bb2d8e34cf410dad406e
- SHA1 5a94ddc8812ac5996bb9e07dea3c718d29dacb68
- SHA512 1a328f5cfaafdb96a1022a1547366c27bb83cf019b93ac15262c4b18ccd370002db68846aeec6beb95aa550065905c09e9f254b2ac43995a43ca321ccb31b99a
- SSDEEP 49152:rsu3Yqc97TBuO3XAL8Njmbb/zedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyg:YNcH3/zed+UsiC96Q3ou
- TLSH T10C266C03F2E941D8F0AAE2789B365732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1