General
- Target 2026-07-04_9505d2b9eb7dfcf6a3630595cb3bf8b0_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260704-sdadkacw3l
- SHA256 1dcef583047c5cfa0db105ef05a8e6279a571f40755d7320bb133870ad0f54be
- MD5 9505d2b9eb7dfcf6a3630595cb3bf8b0
- SHA1 8869254a0f321dfe31047c506bb62bcb09231122
- SHA512 d2ad4afd1779bd011629af6f49dc2b36a8f69709974024aed975025a632231d0ffd27c0f0ec57ee52cd2bc6d1bb69d90a3ef632fcc82b253543afc9cd7a13e5a
- SSDEEP 49152:nkuaJq5T3zrX3XAL8Njmbb/Pedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyW8:GhH3/Ped+UsiC96x2r8
- TLSH T18C266C03F2E941D8F0AEE2789B765732EE72BC568B3065DF025036151E76EE05B38762
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-07-04_9505d2b9eb7dfcf6a3630595cb3bf8b0_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 1dcef583047c5cfa0db105ef05a8e6279a571f40755d7320bb133870ad0f54be
- MD5 9505d2b9eb7dfcf6a3630595cb3bf8b0
- SHA1 8869254a0f321dfe31047c506bb62bcb09231122
- SHA512 d2ad4afd1779bd011629af6f49dc2b36a8f69709974024aed975025a632231d0ffd27c0f0ec57ee52cd2bc6d1bb69d90a3ef632fcc82b253543afc9cd7a13e5a
- SSDEEP 49152:nkuaJq5T3zrX3XAL8Njmbb/Pedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyW8:GhH3/Ped+UsiC96x2r8
- TLSH T18C266C03F2E941D8F0AEE2789B765732EE72BC568B3065DF025036151E76EE05B38762
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1