General
- Target 2026-06-26_a4584b0a301b67626e6d51aaa30bf70a_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260629-qqr32aev4t
- SHA256 9ca22615c853b77e5cbc7ad14f0b376d85ef82c6cc1241bd40e816d66db7c21d
- MD5 a4584b0a301b67626e6d51aaa30bf70a
- SHA1 b2dd86587bee6134f1712eab697b62dbbf06de19
- SHA512 84b71910f0180a97fc6f8a24f5375e02977fecbc7dcba66e428e7255276fa45840cf993073efab25d473e8fc08785b1d0c2547f7848f2293e700c294468ca3d7
- SSDEEP 49152:rYSudOVIA65/eQp3XAL8Njmbb/Eedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40Ns3:BzH3/Eed+UsiC96G
- TLSH T1B4266C03F2E941D8F0AEE2789B765732EE72BC568B30A5DF025036151E76EE05B38761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-06-26_a4584b0a301b67626e6d51aaa30bf70a_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 9ca22615c853b77e5cbc7ad14f0b376d85ef82c6cc1241bd40e816d66db7c21d
- MD5 a4584b0a301b67626e6d51aaa30bf70a
- SHA1 b2dd86587bee6134f1712eab697b62dbbf06de19
- SHA512 84b71910f0180a97fc6f8a24f5375e02977fecbc7dcba66e428e7255276fa45840cf993073efab25d473e8fc08785b1d0c2547f7848f2293e700c294468ca3d7
- SSDEEP 49152:rYSudOVIA65/eQp3XAL8Njmbb/Eedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40Ns3:BzH3/Eed+UsiC96G
- TLSH T1B4266C03F2E941D8F0AEE2789B765732EE72BC568B30A5DF025036151E76EE05B38761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1