General
- Target 2026-07-05_4f97cf1b3dbeb93b7faa4d084d9f0297_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260705-mbj74aft7j
- SHA256 e0afd72cba7b7b8765cd9f2f82cfb2560570aa6c355a5efecb611c648a835307
- MD5 4f97cf1b3dbeb93b7faa4d084d9f0297
- SHA1 0d3f5bc5570695d2522dc7dab74f4b9259a92302
- SHA512 a219e6d5d25ad4dd77f26a09ea0ffe4ce0e74e3dc7b1a808a87155c524e8e957966bd5fd62fd7ef4fd95c0b8019c5b6f09a8a8edb8b38904499b775bcd52da14
- SSDEEP 49152:Oj2QOV0PZ14FcQ3XAL8Njmbb/Kedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHN:KOuH3/Ked+UsiC96Yf
- TLSH T16A266C03F2E941D8F0AEE2789B765732EE72BC568B3065DF025036151E76EE05B38762
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-07-05_4f97cf1b3dbeb93b7faa4d084d9f0297_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 e0afd72cba7b7b8765cd9f2f82cfb2560570aa6c355a5efecb611c648a835307
- MD5 4f97cf1b3dbeb93b7faa4d084d9f0297
- SHA1 0d3f5bc5570695d2522dc7dab74f4b9259a92302
- SHA512 a219e6d5d25ad4dd77f26a09ea0ffe4ce0e74e3dc7b1a808a87155c524e8e957966bd5fd62fd7ef4fd95c0b8019c5b6f09a8a8edb8b38904499b775bcd52da14
- SSDEEP 49152:Oj2QOV0PZ14FcQ3XAL8Njmbb/Kedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHN:KOuH3/Ked+UsiC96Yf
- TLSH T16A266C03F2E941D8F0AEE2789B765732EE72BC568B3065DF025036151E76EE05B38762
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1