72c50cf4623d1268bd5eb54a92e0c68f8f76479be3fad62f830d6d0d2cfe148a | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-05-28...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-05-28_94efc6ce68b49958805d0867afbbdacd_icedid_njrat_ryuk
Size 2.3MB
Sample260528-gekp5sf14j
SHA256 72c50cf4623d1268bd5eb54a92e0c68f8f76479be3fad62f830d6d0d2cfe148a
MD5 94efc6ce68b49958805d0867afbbdacd
SHA1 e4bbfb8b8bb50404be932141937e28a94cc2d062
SHA512 63bac3fd8ab3f8057707f6bbe1b89608057582f347379af6d98b0bd04bb5ad5f4176bf41f9b90a41b36668c700d23c78dec6e049d5ef9fd1e7ce097327e9bd09
SSDEEP 24576:f7OwGiiRD2LoV+vu+xfXgqmr614Gqvq5sHD5ctut8NOKB0GunTZ64cnQ/tbw/2M5:fRiB2UkB2Gqvzd5t8N30rcQ/lFTjN4
TLSH
T10BB55A33B2F200A9C05DE1769F46973296D17C718FE0E3DB864572161FB2AD07A3A71A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery ransomware spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-05-28_94efc6ce68b49958805d0867afbbdacd_icedid_njrat_ryuk.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

15 signatures

150 seconds

discovery ransomware spyware stealer

Malware Config

Targets

- Target
  2026-05-28_94efc6ce68b49958805d0867afbbdacd_icedid_njrat_ryuk
- Size 2.3MB
- SHA256 72c50cf4623d1268bd5eb54a92e0c68f8f76479be3fad62f830d6d0d2cfe148a
- MD5 94efc6ce68b49958805d0867afbbdacd
- SHA1 e4bbfb8b8bb50404be932141937e28a94cc2d062
- SHA512 63bac3fd8ab3f8057707f6bbe1b89608057582f347379af6d98b0bd04bb5ad5f4176bf41f9b90a41b36668c700d23c78dec6e049d5ef9fd1e7ce097327e9bd09
- SSDEEP 24576:f7OwGiiRD2LoV+vu+xfXgqmr614Gqvq5sHD5ctut8NOKB0GunTZ64cnQ/tbw/2M5:fRiB2UkB2Gqvzd5t8N30rcQ/lFTjN4
- TLSH
  T10BB55A33B2F200A9C05DE1769F46973296D17C718FE0E3DB864572161FB2AD07A3A71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery ransomware spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomwarespywarestealer

© 2018-2026

Terms | Privacy