General
- Target 2026-06-26_3912307d288c42168e29e69051b4919b_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260629-vc2grsh16x
- SHA256 492d5b2f0d215bf0db87431a9bb1e3d6705f2be9c93b93935b3dff08e1c4ea48
- MD5 3912307d288c42168e29e69051b4919b
- SHA1 c25d7869a03a7582e31254456d23298c082a7efe
- SHA512 333fa415f61ffa504bbf46667f39ee90c96e66df045303a1f20ce9d721a25eaf7fdfc8bdd0af90ad57d2aabf94872abf0e2d93700869b1b2b2676276164c0267
- SSDEEP 49152:Mq9dTovyVYMc3XAL8Njmbb/hedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyWZ:tHH3/hed+UsiC966
- TLSH T1C5266C03F2E941D8F0AAE2789B765732EE72BC568B3065DF025036151E76EE05B3C762
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-06-26_3912307d288c42168e29e69051b4919b_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 492d5b2f0d215bf0db87431a9bb1e3d6705f2be9c93b93935b3dff08e1c4ea48
- MD5 3912307d288c42168e29e69051b4919b
- SHA1 c25d7869a03a7582e31254456d23298c082a7efe
- SHA512 333fa415f61ffa504bbf46667f39ee90c96e66df045303a1f20ce9d721a25eaf7fdfc8bdd0af90ad57d2aabf94872abf0e2d93700869b1b2b2676276164c0267
- SSDEEP 49152:Mq9dTovyVYMc3XAL8Njmbb/hedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyWZ:tHH3/hed+UsiC966
- TLSH T1C5266C03F2E941D8F0AAE2789B765732EE72BC568B3065DF025036151E76EE05B3C762
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1