General
- Target 2026-07-03_cee4fed59db4552771371247457ef462_icedid_njrat_ryuk
- Size 293KB
- Sample260703-a2v13adz3j
- SHA256 ea261055d12418ff5a813478aa3c69f3100f149761992152fac927074ae4eecf
- MD5 cee4fed59db4552771371247457ef462
- SHA1 027b4b6ef607fc92dbcd226dc2f0b19fd0955e59
- SHA512 5238e6ee15dc0a11fcbd12c144fd932743c72476ec707d21c47919130cdaab23a901691fdcc7b74a6eafcd717a4f1a871b8e31dc6e259ac4b4bfac373af05b62
- SSDEEP 6144:ImaD5Tds9R0VAEKKxjC41X/ug7R7EF33dQ4qWUdEMOv/oA9nC53oFFuJ:xo5Tds9RyrKEjjL1ixRC
- TLSH T1A5549E4A73A40DF5D5B7C1388D6266A1E6B3BC524A34D72F02A0836F6F33661AD3DB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_cee4fed59db4552771371247457ef462_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_cee4fed59db4552771371247457ef462_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_cee4fed59db4552771371247457ef462_icedid_njrat_ryuk
- Size 293KB
- SHA256 ea261055d12418ff5a813478aa3c69f3100f149761992152fac927074ae4eecf
- MD5 cee4fed59db4552771371247457ef462
- SHA1 027b4b6ef607fc92dbcd226dc2f0b19fd0955e59
- SHA512 5238e6ee15dc0a11fcbd12c144fd932743c72476ec707d21c47919130cdaab23a901691fdcc7b74a6eafcd717a4f1a871b8e31dc6e259ac4b4bfac373af05b62
- SSDEEP 6144:ImaD5Tds9R0VAEKKxjC41X/ug7R7EF33dQ4qWUdEMOv/oA9nC53oFFuJ:xo5Tds9RyrKEjjL1ixRC
- TLSH T1A5549E4A73A40DF5D5B7C1388D6266A1E6B3BC524A34D72F02A0836F6F33661AD3DB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.