General
- Target 2026-07-04_39eb95c198fd43f6f73e137ae9f974c9_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260704-kl567sdt4s
- SHA256 26b4702698911b9a04e98c63e246184362f0f3160a5bc2ea439649cebd9032a6
- MD5 39eb95c198fd43f6f73e137ae9f974c9
- SHA1 6cd4adf28b91c89f7f51522b53d3edaf8b1f74a4
- SHA512 7d798921e72237d65db5cd7340c9937d564bf6fb66dfb4ed825267ba422f529d1c4b0c5a2ff76009613719584f76e2668ebe9a0df4ecfc86fed02a8a30683b31
- SSDEEP 49152:WU2B8eCBdpKk3XAL8Njmbb/iedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyWq:U5H3/ied+UsiC96t
- TLSH T1CC266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-07-04_39eb95c198fd43f6f73e137ae9f974c9_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 26b4702698911b9a04e98c63e246184362f0f3160a5bc2ea439649cebd9032a6
- MD5 39eb95c198fd43f6f73e137ae9f974c9
- SHA1 6cd4adf28b91c89f7f51522b53d3edaf8b1f74a4
- SHA512 7d798921e72237d65db5cd7340c9937d564bf6fb66dfb4ed825267ba422f529d1c4b0c5a2ff76009613719584f76e2668ebe9a0df4ecfc86fed02a8a30683b31
- SSDEEP 49152:WU2B8eCBdpKk3XAL8Njmbb/iedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyWq:U5H3/ied+UsiC96t
- TLSH T1CC266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1