General
- Target 2026-06-26_2d69ce6ba485de58e5752f376d711f86_icedid_njrat_ryuk
- Size 953KB
- Sample260629-vr78vsav4x
- SHA256 88add5ccd2488425ae1fb2deac6b6c6d4cd2d09ac26c02644b01d695fdb7c813
- MD5 2d69ce6ba485de58e5752f376d711f86
- SHA1 3aa5f4418a75e69c5ed2445674a03365dffed201
- SHA512 f2dd08fb9089a2877352a471b287c799689ba7e16b2e9d69048940a86574d38b9bda44e70381d026f45724f0e80448dc6662658efed6680d138447cdf725dc22
- SSDEEP 24576:Qot3+TporGvTWQMSBhvn/+r18fVSnrLFY+iOOMAep10:zt3+T4K5dBh3qIVSnN7iOOMXpi
- TLSH T1A325014536D404F8E5B3C678C9715616E2B67C665B30C79F03A4276B9F333A0AE3AB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_2d69ce6ba485de58e5752f376d711f86_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_2d69ce6ba485de58e5752f376d711f86_icedid_njrat_ryuk
- Size 953KB
- SHA256 88add5ccd2488425ae1fb2deac6b6c6d4cd2d09ac26c02644b01d695fdb7c813
- MD5 2d69ce6ba485de58e5752f376d711f86
- SHA1 3aa5f4418a75e69c5ed2445674a03365dffed201
- SHA512 f2dd08fb9089a2877352a471b287c799689ba7e16b2e9d69048940a86574d38b9bda44e70381d026f45724f0e80448dc6662658efed6680d138447cdf725dc22
- SSDEEP 24576:Qot3+TporGvTWQMSBhvn/+r18fVSnrLFY+iOOMAep10:zt3+T4K5dBh3qIVSnN7iOOMXpi
- TLSH T1A325014536D404F8E5B3C678C9715616E2B67C665B30C79F03A4276B9F333A0AE3AB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1