General
- Target 2026-07-03_da542a21767af9dd37291a582bc5e1ac_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260703-eyraxsbt4v
- SHA256 28b064fa339aca415fb5ee1d8e63d7ad38e3e04d48ec63571086d7beed6c02b8
- MD5 da542a21767af9dd37291a582bc5e1ac
- SHA1 07bafe132afa21211a99d2d4a5f31f2abb28622d
- SHA512 5ba09b6cef980840c4e69db102be9e79642f2dfde75538d2a718bf6b624e7d8fbc2177d144cffa66d313e34e75bcaa389731b621c2bebf8d27a4119921da682a
- SSDEEP 49152:m8UxNdx1iuSVs3XAL8Njmbb/Iedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHy7:+oH3/Ied+UsiC961D
- TLSH T191266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-07-03_da542a21767af9dd37291a582bc5e1ac_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 28b064fa339aca415fb5ee1d8e63d7ad38e3e04d48ec63571086d7beed6c02b8
- MD5 da542a21767af9dd37291a582bc5e1ac
- SHA1 07bafe132afa21211a99d2d4a5f31f2abb28622d
- SHA512 5ba09b6cef980840c4e69db102be9e79642f2dfde75538d2a718bf6b624e7d8fbc2177d144cffa66d313e34e75bcaa389731b621c2bebf8d27a4119921da682a
- SSDEEP 49152:m8UxNdx1iuSVs3XAL8Njmbb/Iedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHy7:+oH3/Ied+UsiC961D
- TLSH T191266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1