General
- Target 2026-07-07_467e5ab2cf31e2b8e2cc803449fc40b3_icedid_njrat_ryuk
- Size 1.6MB
- Sample260707-tsd6qsas2q
- SHA256 c003952ac4dd9e3a575bbb1b9ad3fc07aa360a40f4484ceb2f57daaed214e5e6
- MD5 467e5ab2cf31e2b8e2cc803449fc40b3
- SHA1 e3205054167513d57a7ba4cf9cbcf1d62ca26e01
- SHA512 7992dc772b55d1b7e633bc351c7a118d1d455f20a8e45c31c6ebbd659213fa452ab462a5f680c386575ecbb5b93aff23e44a08dec7db3f036b0245e3726026ca
- SSDEEP 12288:pOb4A4LWOsvAYFTcGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWF:ewL3UTcnQ/tbw/2Mkjy6Fr7g0oF
- TLSH T1C275F155F7A450F9E92B817CC8A28616E372789D1764E7DF03A84A691F333E14E3EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_467e5ab2cf31e2b8e2cc803449fc40b3_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_467e5ab2cf31e2b8e2cc803449fc40b3_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_467e5ab2cf31e2b8e2cc803449fc40b3_icedid_njrat_ryuk
- Size 1.6MB
- SHA256 c003952ac4dd9e3a575bbb1b9ad3fc07aa360a40f4484ceb2f57daaed214e5e6
- MD5 467e5ab2cf31e2b8e2cc803449fc40b3
- SHA1 e3205054167513d57a7ba4cf9cbcf1d62ca26e01
- SHA512 7992dc772b55d1b7e633bc351c7a118d1d455f20a8e45c31c6ebbd659213fa452ab462a5f680c386575ecbb5b93aff23e44a08dec7db3f036b0245e3726026ca
- SSDEEP 12288:pOb4A4LWOsvAYFTcGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWF:ewL3UTcnQ/tbw/2Mkjy6Fr7g0oF
- TLSH T1C275F155F7A450F9E92B817CC8A28616E372789D1764E7DF03A84A691F333E14E3EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory