General
- Target 2026-07-08_7baa8e8c452406a89c0416141413e77b_icedid_ryuk
- Size 658KB
- Sample260708-a2wmlahv9l
- SHA256 a19cf4c78ac2016776950c8333f1578af14d8a19bd4e5e66ccb06fadb1585a24
- MD5 7baa8e8c452406a89c0416141413e77b
- SHA1 a844e2aac42112b679c74fd7c25b38c49d45bced
- SHA512 67292460af87d4847d7260ab79f6f60780ff91da95d838f7f04da511546114e255f6b4ab87ebb6f48332c64d28c66d60c9ba95794d726ca8af2acdf565e18875
- SSDEEP 12288:LRT7GDqDCB/9u2xKx+8qYwSHnGKwwqdSzY2laFeFyqt/p0tw1:LZ7+qDGCxf7Gz3Q9At
- TLSH T14BE4124773E451E8F27647709871640ADB76F8A2AB61CBAF0225129A1F336D18E34F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_7baa8e8c452406a89c0416141413e77b_icedid_ryuk.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_7baa8e8c452406a89c0416141413e77b_icedid_ryuk
- Size 658KB
- SHA256 a19cf4c78ac2016776950c8333f1578af14d8a19bd4e5e66ccb06fadb1585a24
- MD5 7baa8e8c452406a89c0416141413e77b
- SHA1 a844e2aac42112b679c74fd7c25b38c49d45bced
- SHA512 67292460af87d4847d7260ab79f6f60780ff91da95d838f7f04da511546114e255f6b4ab87ebb6f48332c64d28c66d60c9ba95794d726ca8af2acdf565e18875
- SSDEEP 12288:LRT7GDqDCB/9u2xKx+8qYwSHnGKwwqdSzY2laFeFyqt/p0tw1:LZ7+qDGCxf7Gz3Q9At
- TLSH T14BE4124773E451E8F27647709871640ADB76F8A2AB61CBAF0225129A1F336D18E34F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory