General
- Target 2026-07-06_955f5acb44f2775eed199013e0e5779c_icedid_njrat_ryuk
- Size 1.3MB
- Sample260706-ngqshaes4w
- SHA256 1894df6adc2f7c2352d3f17b9aa26d90d65bf1cceaa85299663475add63b8c73
- MD5 955f5acb44f2775eed199013e0e5779c
- SHA1 c2a62e06dc3a4b8c6a9e8c032253d49ed7194881
- SHA512 7ad3ca089d749e0df1edb27b1fd09b039582829623c6a1a3ab78c8c25d2bd40a4564ff22408507e82bf3e5b10bb90938d1197db6afa76f8dc9045f6a1bda4cd6
- SSDEEP 12288:Eracl3jXI7vgbrWVQhTCYHvRktx/aICF9flefuKaO0VQ/:maclU743TvRk6NwG
- TLSH T13555121B73A030FDD173D63AC8915592D772B93246519F9F03A886622F2B2E19E3DF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_955f5acb44f2775eed199013e0e5779c_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_955f5acb44f2775eed199013e0e5779c_icedid_njrat_ryuk
- Size 1.3MB
- SHA256 1894df6adc2f7c2352d3f17b9aa26d90d65bf1cceaa85299663475add63b8c73
- MD5 955f5acb44f2775eed199013e0e5779c
- SHA1 c2a62e06dc3a4b8c6a9e8c032253d49ed7194881
- SHA512 7ad3ca089d749e0df1edb27b1fd09b039582829623c6a1a3ab78c8c25d2bd40a4564ff22408507e82bf3e5b10bb90938d1197db6afa76f8dc9045f6a1bda4cd6
- SSDEEP 12288:Eracl3jXI7vgbrWVQhTCYHvRktx/aICF9flefuKaO0VQ/:maclU743TvRk6NwG
- TLSH T13555121B73A030FDD173D63AC8915592D772B93246519F9F03A886622F2B2E19E3DF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1