General
- Target 2026-07-04_cfc5f2e44ea94b6ddb34afacf6d35abd_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260704-vwegcaet6r
- SHA256 6544f8b3f9c7be90e45a267f2fe23656c710e6f62178e918380c4436051892f2
- MD5 cfc5f2e44ea94b6ddb34afacf6d35abd
- SHA1 e6e6d47633e01aa1c347e5792acf0d4bf8ad921e
- SHA512 b78bbfadb5efc5c0113cef96477ebe1eadcb2c9e46e094672da2b04bcab0008d9ae1a70cc3cd4b00e85e707f6800f89e453ef1704d20c505432bb9b06eefb04b
- SSDEEP 49152:2O0viUHjZEnHz5c3XAL8Njmbb/dedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsN:oqfFH3/ded+UsiC96Xqz
- TLSH T1C8266C03F2E941D8F0AAE2789B765732EE72BC568B3065DF025036151E76EE05B3C762
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-07-04_cfc5f2e44ea94b6ddb34afacf6d35abd_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 6544f8b3f9c7be90e45a267f2fe23656c710e6f62178e918380c4436051892f2
- MD5 cfc5f2e44ea94b6ddb34afacf6d35abd
- SHA1 e6e6d47633e01aa1c347e5792acf0d4bf8ad921e
- SHA512 b78bbfadb5efc5c0113cef96477ebe1eadcb2c9e46e094672da2b04bcab0008d9ae1a70cc3cd4b00e85e707f6800f89e453ef1704d20c505432bb9b06eefb04b
- SSDEEP 49152:2O0viUHjZEnHz5c3XAL8Njmbb/dedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsN:oqfFH3/ded+UsiC96Xqz
- TLSH T1C8266C03F2E941D8F0AAE2789B765732EE72BC568B3065DF025036151E76EE05B3C762
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1