General
- Target 2026-06-27_47ac7e090c3c41c948413eb63d704677_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260629-jnmbfaas4r
- SHA256 9da2fcde445e4078e70ffe9650c9cdf21a1ed8e2ac62f0c9067b8f2193ad8204
- MD5 47ac7e090c3c41c948413eb63d704677
- SHA1 3be95b639cc718efb0b1ab01c6c138ed4cee840a
- SHA512 860d23459585ec0f886c19c15d7b38a3a5b1e97a8468fdb22fb531b9e93e4bee498c262f2e256bbdf1645bc50d6318550db16bcf746716e0aa828b7d6b9ac1cf
- SSDEEP 49152:px43nKJTHvaD3XAL8Njmbb/2edc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyWu:COH3/2ed+UsiC96B
- TLSH T182266C03F2E941D8F0AEE2789B765732EE72BC568B30A5DF025036151E76EE05B38761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-06-27_47ac7e090c3c41c948413eb63d704677_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 9da2fcde445e4078e70ffe9650c9cdf21a1ed8e2ac62f0c9067b8f2193ad8204
- MD5 47ac7e090c3c41c948413eb63d704677
- SHA1 3be95b639cc718efb0b1ab01c6c138ed4cee840a
- SHA512 860d23459585ec0f886c19c15d7b38a3a5b1e97a8468fdb22fb531b9e93e4bee498c262f2e256bbdf1645bc50d6318550db16bcf746716e0aa828b7d6b9ac1cf
- SSDEEP 49152:px43nKJTHvaD3XAL8Njmbb/2edc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyWu:COH3/2ed+UsiC96B
- TLSH T182266C03F2E941D8F0AEE2789B765732EE72BC568B30A5DF025036151E76EE05B38761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1