General
- Target 2026-06-27_168ff2c0e3e3666f2fee7584a33ae2ec_icedid_mespinoza_njrat_ryuk
- Size 1.5MB
- Sample260629-lrkccsas5y
- SHA256 790ed4bc23cf24c971f53e0cd4514be7c836f4b3861633466e9ac3d217ce2ec0
- MD5 168ff2c0e3e3666f2fee7584a33ae2ec
- SHA1 f0c8c023e66dfb26b480f1f7dad44aa70a31f216
- SHA512 01189b07c6cbf11da8b1681f389ef158a85e6200db61b7729dff7f6849276426434631d47e29f218720b50bad681e5f005c80f58891fefbde7707858df94ce0f
- SSDEEP 24576:eoePzWRWcf2OUPGCD5TPJO/rpqSt8C53UbilBf:ebzWRWcf4GCTO/1qk8C53U
- TLSH T1B075F119F7A104F8D1B3D534C8964647E7B37C8A5A318B5F13AD87AA2F233609D39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_168ff2c0e3e3666f2fee7584a33ae2ec_icedid_mespinoza_njrat_ryuk.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_168ff2c0e3e3666f2fee7584a33ae2ec_icedid_mespinoza_njrat_ryuk
- Size 1.5MB
- SHA256 790ed4bc23cf24c971f53e0cd4514be7c836f4b3861633466e9ac3d217ce2ec0
- MD5 168ff2c0e3e3666f2fee7584a33ae2ec
- SHA1 f0c8c023e66dfb26b480f1f7dad44aa70a31f216
- SHA512 01189b07c6cbf11da8b1681f389ef158a85e6200db61b7729dff7f6849276426434631d47e29f218720b50bad681e5f005c80f58891fefbde7707858df94ce0f
- SSDEEP 24576:eoePzWRWcf2OUPGCD5TPJO/rpqSt8C53UbilBf:ebzWRWcf4GCTO/1qk8C53U
- TLSH T1B075F119F7A104F8D1B3D534C8964647E7B37C8A5A318B5F13AD87AA2F233609D39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1