General
- Target 2026-07-02_1285e46345daf7d85bd999e99e20f8b3_icedid_njrat_ryuk
- Size 691KB
- Sample260702-ebvd3abw51
- SHA256 3baf3f1379170e062f5c6dcdacd9a3fe4d8a300bd5573534ac160f88163a79dd
- MD5 1285e46345daf7d85bd999e99e20f8b3
- SHA1 0b242fc9ec9d94a9aadc8468b3b8465ed25c7564
- SHA512 d24314c4af3b440239f38ed0d13eea9988683618c1e1d5937eec8d2b1bde9ac34ae5a1fe49f2009d401f5da8a4a3228cf6378ca74b2b9a56fe1d5905b0a31063
- SSDEEP 6144:IN9NWLm89v35SDs9pFQzguuoLLNsqPzw+sDs809xJTtP7/F30t9Ttz:IN9N6SDs9pizwodzw+sIX9MtBR
- TLSH T14DE4C411BBA449B1F0A299344975966C9B727C55CD23CE0F2095AEDEFFF39808D24B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_1285e46345daf7d85bd999e99e20f8b3_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_1285e46345daf7d85bd999e99e20f8b3_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260630-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_1285e46345daf7d85bd999e99e20f8b3_icedid_njrat_ryuk
- Size 691KB
- SHA256 3baf3f1379170e062f5c6dcdacd9a3fe4d8a300bd5573534ac160f88163a79dd
- MD5 1285e46345daf7d85bd999e99e20f8b3
- SHA1 0b242fc9ec9d94a9aadc8468b3b8465ed25c7564
- SHA512 d24314c4af3b440239f38ed0d13eea9988683618c1e1d5937eec8d2b1bde9ac34ae5a1fe49f2009d401f5da8a4a3228cf6378ca74b2b9a56fe1d5905b0a31063
- SSDEEP 6144:IN9NWLm89v35SDs9pFQzguuoLLNsqPzw+sDs809xJTtP7/F30t9Ttz:IN9N6SDs9pizwodzw+sIX9MtBR
- TLSH T14DE4C411BBA449B1F0A299344975966C9B727C55CD23CE0F2095AEDEFFF39808D24B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.