General
- Target 2026-07-01_3f019d7b457af6214cce77662eecc9cd_icedid_njrat_qakbot_ryuk_stealc
- Size 4.5MB
- Sample260701-l4anpadv71
- SHA256 14cbee5a15336279dad71aa11bbbe4a631ee1369bee8ea6f70541f19f2a2c995
- MD5 3f019d7b457af6214cce77662eecc9cd
- SHA1 8d8b24ee7fea35e630d12364bcb1a07c6c1c6444
- SHA512 fde8788406a5e73048ca54b562a39cffd71e8f5cda2fbd4b5ee06b987d12b21b82df0b5cf9072a10c70f5a2fe09401132e113df47e3928b360074068e55f0565
- SSDEEP 98304:Cf/MSbEvdJOw4X+u5AbPV0t3IeP9/67pu:haX+u5AbPVK9/Kpu
- TLSH T1C3268D43FEF700E9C03AA5B5C247A222A531B448073569DF17F85738AFA27E01B7AB55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_3f019d7b457af6214cce77662eecc9cd_icedid_njrat_qakbot_ryuk_stealc.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_3f019d7b457af6214cce77662eecc9cd_icedid_njrat_qakbot_ryuk_stealc.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_3f019d7b457af6214cce77662eecc9cd_icedid_njrat_qakbot_ryuk_stealc
- Size 4.5MB
- SHA256 14cbee5a15336279dad71aa11bbbe4a631ee1369bee8ea6f70541f19f2a2c995
- MD5 3f019d7b457af6214cce77662eecc9cd
- SHA1 8d8b24ee7fea35e630d12364bcb1a07c6c1c6444
- SHA512 fde8788406a5e73048ca54b562a39cffd71e8f5cda2fbd4b5ee06b987d12b21b82df0b5cf9072a10c70f5a2fe09401132e113df47e3928b360074068e55f0565
- SSDEEP 98304:Cf/MSbEvdJOw4X+u5AbPV0t3IeP9/67pu:haX+u5AbPVK9/Kpu
- TLSH T1C3268D43FEF700E9C03AA5B5C247A222A531B448073569DF17F85738AFA27E01B7AB55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.