General
- Target 2026-07-04_8348dffbe057ae639dfed703a7c0cd20_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260704-mfe4yah19r
- SHA256 f6480de0938c330019b42738def23edf05d74c3aa5cb27bc2fb5439926c74a66
- MD5 8348dffbe057ae639dfed703a7c0cd20
- SHA1 14ae8e104c410f64507984d76a375f3a0e4ed5d5
- SHA512 977595ba430bf7bc2b4b81cc569a1f6b9c81d1edd55a3fdf8f53d70e719fb1f5257578c6ba5c9b85f50a9c249aab2895cb5dce173ef1cb8937a3d303d8ee3fac
- SSDEEP 49152:/n47dkWqaNeoH8WlV3XAL8Njmbb/2edc+KokvY0n/sHQ4VD//IOSArTpYDOJj40q:/0Z4H3/2ed+UsiC96bx4Me
- TLSH T1F6266C03F2E941D8F0AAE2B89B765732EE72BC568B3065DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-07-04_8348dffbe057ae639dfed703a7c0cd20_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 f6480de0938c330019b42738def23edf05d74c3aa5cb27bc2fb5439926c74a66
- MD5 8348dffbe057ae639dfed703a7c0cd20
- SHA1 14ae8e104c410f64507984d76a375f3a0e4ed5d5
- SHA512 977595ba430bf7bc2b4b81cc569a1f6b9c81d1edd55a3fdf8f53d70e719fb1f5257578c6ba5c9b85f50a9c249aab2895cb5dce173ef1cb8937a3d303d8ee3fac
- SSDEEP 49152:/n47dkWqaNeoH8WlV3XAL8Njmbb/2edc+KokvY0n/sHQ4VD//IOSArTpYDOJj40q:/0Z4H3/2ed+UsiC96bx4Me
- TLSH T1F6266C03F2E941D8F0AAE2B89B765732EE72BC568B3065DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1