General
- Target 2026-05-29_84f69a30ea67fbba5adb855648ab7f1a_icedid_njrat_ryuk
- Size 674KB
- Sample260529-ejzzhscw5w
- SHA256 15615442af217cab5b9738b07ded2134610c82f4fb1c8171e3aa33bacbad1817
- MD5 84f69a30ea67fbba5adb855648ab7f1a
- SHA1 1b5f92993dfa15ca4275096b29ea421d4c8c0d64
- SHA512 1cf0541d4e7f09b03c3eeb3ac4ec5e1279c78b50af5641038c49f254ae69471b1e2e04a54443708910d38ae3460d440f5462fa31c3afb018a83060b52a4249ff
- SSDEEP 12288:Ls9Ir5eSoCU5qJSr1eSQUs+mgb1MLfUgMAyHUzTshpOjJjViaicv:7QSoCU5qJSr1eSQb61MLfUgM7eTZj4w
- TLSH T1A0E4AE5A779016F5E17BD23DCA524A55EAB278024720E34F03AA53AB1F233615F7F322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-29_84f69a30ea67fbba5adb855648ab7f1a_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-29_84f69a30ea67fbba5adb855648ab7f1a_icedid_njrat_ryuk.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-29_84f69a30ea67fbba5adb855648ab7f1a_icedid_njrat_ryuk
- Size 674KB
- SHA256 15615442af217cab5b9738b07ded2134610c82f4fb1c8171e3aa33bacbad1817
- MD5 84f69a30ea67fbba5adb855648ab7f1a
- SHA1 1b5f92993dfa15ca4275096b29ea421d4c8c0d64
- SHA512 1cf0541d4e7f09b03c3eeb3ac4ec5e1279c78b50af5641038c49f254ae69471b1e2e04a54443708910d38ae3460d440f5462fa31c3afb018a83060b52a4249ff
- SSDEEP 12288:Ls9Ir5eSoCU5qJSr1eSQUs+mgb1MLfUgMAyHUzTshpOjJjViaicv:7QSoCU5qJSr1eSQb61MLfUgM7eTZj4w
- TLSH T1A0E4AE5A779016F5E17BD23DCA524A55EAB278024720E34F03AA53AB1F233615F7F322
- MD5 SHA1 SHA512 SSDEEP TLSH
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.