General
- Target 2026-05-28_96a620962f74309516ddad1e7e113028_icedid_mespinoza_njrat_ryuk
- Size 1.7MB
- Sample260528-stdqxses4z
- SHA256 aa2356c66a4f17413092913b4ae1b2023e39fd100e969f9db4fab402afb61718
- MD5 96a620962f74309516ddad1e7e113028
- SHA1 8f0e18249b6a04290a744e39d640f6e7709bc5bc
- SHA512 3dbdf2477eff3b2b3bb655ddf8cf743efbe4e8759d8da35d7cd976bccdc0a324fb711e8d791a5d4ad08b6763c5c890a1a2cc84c900846fff231771930416a22f
- SSDEEP 49152:QvADMyWV1OlRuSCaME8ZsAtgga3Ns6s3+e5J13OeJjZs24NM8gVT3zDg5a:fWl3Oos2eMFK5a
- TLSH T18485AE05775665EDC09AC4B0834286636E6078CB0F35FEEF4594A2293FBAAF41F39724
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-28_96a620962f74309516ddad1e7e113028_icedid_mespinoza_njrat_ryuk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-28_96a620962f74309516ddad1e7e113028_icedid_mespinoza_njrat_ryuk
- Size 1.7MB
- SHA256 aa2356c66a4f17413092913b4ae1b2023e39fd100e969f9db4fab402afb61718
- MD5 96a620962f74309516ddad1e7e113028
- SHA1 8f0e18249b6a04290a744e39d640f6e7709bc5bc
- SHA512 3dbdf2477eff3b2b3bb655ddf8cf743efbe4e8759d8da35d7cd976bccdc0a324fb711e8d791a5d4ad08b6763c5c890a1a2cc84c900846fff231771930416a22f
- SSDEEP 49152:QvADMyWV1OlRuSCaME8ZsAtgga3Ns6s3+e5J13OeJjZs24NM8gVT3zDg5a:fWl3Oos2eMFK5a
- TLSH T18485AE05775665EDC09AC4B0834286636E6078CB0F35FEEF4594A2293FBAAF41F39724
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory