General
- Target 2026-06-29_d8067a6f4c7e9d3cf5f767d0e266e4a0_icedid_mespinoza_njrat_ryuk
- Size 13.5MB
- Sample260630-dcl9eady4j
- SHA256 a2e83c802336705be92723d961c79d765665bae9ed424c66b3ef02ca500d924e
- MD5 d8067a6f4c7e9d3cf5f767d0e266e4a0
- SHA1 c3f44e5602554c2fddb8d43cfe397d457ae24549
- SHA512 e30fb7cf859d07ca68a969a102787ee6754aa4ce7e5fdcb376bb917423d054cac300619e93fb961117a8e7ea45bf61405e4a4d83a141a7af8e03a2748cd4fbe0
- SSDEEP 98304:rvY4hCDSLbhcqZif/erO0DS+Fo3tzfG9btN:rv9CDAaH70Dw3U
- TLSH T15EE6157656B4C188C596503BC84A5CFAA36DBC10D8B3523BD5883E37FA3E5D0C9BE219
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_d8067a6f4c7e9d3cf5f767d0e266e4a0_icedid_mespinoza_njrat_ryuk.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_d8067a6f4c7e9d3cf5f767d0e266e4a0_icedid_mespinoza_njrat_ryuk
- Size 13.5MB
- SHA256 a2e83c802336705be92723d961c79d765665bae9ed424c66b3ef02ca500d924e
- MD5 d8067a6f4c7e9d3cf5f767d0e266e4a0
- SHA1 c3f44e5602554c2fddb8d43cfe397d457ae24549
- SHA512 e30fb7cf859d07ca68a969a102787ee6754aa4ce7e5fdcb376bb917423d054cac300619e93fb961117a8e7ea45bf61405e4a4d83a141a7af8e03a2748cd4fbe0
- SSDEEP 98304:rvY4hCDSLbhcqZif/erO0DS+Fo3tzfG9btN:rv9CDAaH70Dw3U
- TLSH T15EE6157656B4C188C596503BC84A5CFAA36DBC10D8B3523BD5883E37FA3E5D0C9BE219
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1