General
- Target 2026-05-29_28ad7464ad61ab64c692eb5d7d836209_hijackloader_icedid_njrat_ryuk
- Size 1.5MB
- Sample260529-tmlzdsav8k
- SHA256 b6e831e6bdf7afc1d48ea933256f75d3c1cf8f81f2763db1fdbd953ee7b0d61e
- MD5 28ad7464ad61ab64c692eb5d7d836209
- SHA1 27a0c1ebdf915fc18aee3435b20fe1cbf2fbf6b8
- SHA512 d9e25255cc4ae4c69adb246620c2bb974d3234dd0fa041c77371f0adfcc425357f26ee789c9a93baa8bc2ec36ffa0afbf625f0a830a7eee16b7b3c0cfa6a9c58
- SSDEEP 24576:nJfQD+hMl+SMFAM9GN7ZMPRn1OsYA7zNrJ4n:nJfQquhMFAMal6RcA7zU
- TLSH T16465F53672F200A9C45EA4729F56473196D23CB2CFE0D3DB8155B21A1FB29D07A3A61F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-29_28ad7464ad61ab64c692eb5d7d836209_hijackloader_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-29_28ad7464ad61ab64c692eb5d7d836209_hijackloader_icedid_njrat_ryuk
- Size 1.5MB
- SHA256 b6e831e6bdf7afc1d48ea933256f75d3c1cf8f81f2763db1fdbd953ee7b0d61e
- MD5 28ad7464ad61ab64c692eb5d7d836209
- SHA1 27a0c1ebdf915fc18aee3435b20fe1cbf2fbf6b8
- SHA512 d9e25255cc4ae4c69adb246620c2bb974d3234dd0fa041c77371f0adfcc425357f26ee789c9a93baa8bc2ec36ffa0afbf625f0a830a7eee16b7b3c0cfa6a9c58
- SSDEEP 24576:nJfQD+hMl+SMFAM9GN7ZMPRn1OsYA7zNrJ4n:nJfQquhMFAMal6RcA7zU
- TLSH T16465F53672F200A9C45EA4729F56473196D23CB2CFE0D3DB8155B21A1FB29D07A3A61F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.