General
- Target 2026-07-03_f0ec1b834021ae4f2b95209d1616b14c_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260703-eyebcsgs2r
- SHA256 482ed59a5417b223ac7bd11078678ba3c0591084f1b0ba829075c61a52d63767
- MD5 f0ec1b834021ae4f2b95209d1616b14c
- SHA1 0703568f3d653dbd6dde58519aba309565842858
- SHA512 279dc7146e8cb3792b818d700dfe83c90c3ec0c2d8c6e4c49c618b97c20e11e9442002e50004acc9aab1c020e5075fada821ee2a81f57f204d7079bc5a356117
- SSDEEP 49152:c2M/ETEA/zVB3XAL8Njmbb/9edc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyWr:obH3/9ed+UsiC96y5
- TLSH T14C266C03F2E941D8F0AEE2789B765732EE72BC568B30A5DF025036151E76EE05B38761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-07-03_f0ec1b834021ae4f2b95209d1616b14c_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 482ed59a5417b223ac7bd11078678ba3c0591084f1b0ba829075c61a52d63767
- MD5 f0ec1b834021ae4f2b95209d1616b14c
- SHA1 0703568f3d653dbd6dde58519aba309565842858
- SHA512 279dc7146e8cb3792b818d700dfe83c90c3ec0c2d8c6e4c49c618b97c20e11e9442002e50004acc9aab1c020e5075fada821ee2a81f57f204d7079bc5a356117
- SSDEEP 49152:c2M/ETEA/zVB3XAL8Njmbb/9edc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyWr:obH3/9ed+UsiC96y5
- TLSH T14C266C03F2E941D8F0AEE2789B765732EE72BC568B30A5DF025036151E76EE05B38761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1