General
- Target 2026-06-27_e0787f5120c89ab4d3efebea707845c5_icedid_mespinoza_njrat_ryuk
- Size 1.1MB
- Sample260629-chwvcsay9v
- SHA256 a09089c4357f70120968e754d4e13ca05ed550b225c21a4ab6dfcafd7c8f619b
- MD5 e0787f5120c89ab4d3efebea707845c5
- SHA1 a302afcbe3e25e58e0dc62b63bf4b8d386cc7dd5
- SHA512 d3c7a8b5e092ef03df6d0472635972a8c12ca64770ca4d9695d2d75f5a643711d69946050d28a494d1678c2109e474d45c07ae8549a58e2988b31563c7702ad1
- SSDEEP 24576:3cmUsjYzjQsXPWJicLXMhwFngTnJrtCQ29DsqjnhMgeiCl7G0nehbGZpbD:3tUsKPWJicLchwFnartCvDmg27RnWGj
- TLSH T18845E159A7F500B8E0B3D674CA668117FAB778456A308F5F03A5865B2F336608F3D722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_e0787f5120c89ab4d3efebea707845c5_icedid_mespinoza_njrat_ryuk.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_e0787f5120c89ab4d3efebea707845c5_icedid_mespinoza_njrat_ryuk.exe
Resource
win11ltsc2024-20260618-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_e0787f5120c89ab4d3efebea707845c5_icedid_mespinoza_njrat_ryuk
- Size 1.1MB
- SHA256 a09089c4357f70120968e754d4e13ca05ed550b225c21a4ab6dfcafd7c8f619b
- MD5 e0787f5120c89ab4d3efebea707845c5
- SHA1 a302afcbe3e25e58e0dc62b63bf4b8d386cc7dd5
- SHA512 d3c7a8b5e092ef03df6d0472635972a8c12ca64770ca4d9695d2d75f5a643711d69946050d28a494d1678c2109e474d45c07ae8549a58e2988b31563c7702ad1
- SSDEEP 24576:3cmUsjYzjQsXPWJicLXMhwFngTnJrtCQ29DsqjnhMgeiCl7G0nehbGZpbD:3tUsKPWJicLchwFnartCvDmg27RnWGj
- TLSH T18845E159A7F500B8E0B3D674CA668117FAB778456A308F5F03A5865B2F336608F3D722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory