General
- Target 2026-07-06_204e1e8bf6b8ca2fab1689d34cf22663_icedid_ryuk
- Size 643KB
- Sample260707-flw63sfs8m
- SHA256 110198f748fdfeb57367527722a82a5feca804c4d1c91aec86ea40af8f58672e
- MD5 204e1e8bf6b8ca2fab1689d34cf22663
- SHA1 0ebb0dbea2808d9a20c6b530c580b2aaf45fde9b
- SHA512 c7e29a6ce84e9c84735c499b33b3a605419017e37ba5e2cbd16cd53b986b13768b81c28155d3dfa7e027b2fe612a97fd95665d04afe088f0cb1cecb4440ec7f1
- SSDEEP 6144:19fYunoPZPS4GWuoSfhzeNKs43sv72Ex:k+oBSTpzG4382Ex
- TLSH T176E4DAD2B5844099D99A8633E258F523D3FC5CF22E004146EBD7BEC926B1784DB22EF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_204e1e8bf6b8ca2fab1689d34cf22663_icedid_ryuk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_204e1e8bf6b8ca2fab1689d34cf22663_icedid_ryuk.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_204e1e8bf6b8ca2fab1689d34cf22663_icedid_ryuk
- Size 643KB
- SHA256 110198f748fdfeb57367527722a82a5feca804c4d1c91aec86ea40af8f58672e
- MD5 204e1e8bf6b8ca2fab1689d34cf22663
- SHA1 0ebb0dbea2808d9a20c6b530c580b2aaf45fde9b
- SHA512 c7e29a6ce84e9c84735c499b33b3a605419017e37ba5e2cbd16cd53b986b13768b81c28155d3dfa7e027b2fe612a97fd95665d04afe088f0cb1cecb4440ec7f1
- SSDEEP 6144:19fYunoPZPS4GWuoSfhzeNKs43sv72Ex:k+oBSTpzG4382Ex
- TLSH T176E4DAD2B5844099D99A8633E258F523D3FC5CF22E004146EBD7BEC926B1784DB22EF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.