General
- Target 2026-07-07_6c3e712bb931d86baee48bf6d79ed669_icedid_mespinoza_njrat_ryuk
- Size 1.9MB
- Sample260708-bbhhqahx2n
- SHA256 a08d1f4576464d7d2698150f55c5e1d4f2986ecaa88a81e8ca57541566a6fe3b
- MD5 6c3e712bb931d86baee48bf6d79ed669
- SHA1 a71d149e923c8594d67e1e55e0af56d72bdb7436
- SHA512 15f25e90ed708ee8a1c93de513bf841f3d5156e6f0cc657ab54bb4d861a6910f323e3b38898e4b54216fac412d842bb3f3a7e5bc6c16bcb56ca586aa8a8c0e47
- SSDEEP 24576:9h6Ur/ib3xM7dLtJYV+FZad9MChKTNrKWz7vUifgpKyAv9qv:9hLbibedfOnqCwNV7vP8Ky+9qv
- TLSH T1EC95D049AB5440E1D1B6C17889439946E6B2BC005B71EBDF02D8F73A2F376E19D3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_6c3e712bb931d86baee48bf6d79ed669_icedid_mespinoza_njrat_ryuk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_6c3e712bb931d86baee48bf6d79ed669_icedid_mespinoza_njrat_ryuk.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_6c3e712bb931d86baee48bf6d79ed669_icedid_mespinoza_njrat_ryuk
- Size 1.9MB
- SHA256 a08d1f4576464d7d2698150f55c5e1d4f2986ecaa88a81e8ca57541566a6fe3b
- MD5 6c3e712bb931d86baee48bf6d79ed669
- SHA1 a71d149e923c8594d67e1e55e0af56d72bdb7436
- SHA512 15f25e90ed708ee8a1c93de513bf841f3d5156e6f0cc657ab54bb4d861a6910f323e3b38898e4b54216fac412d842bb3f3a7e5bc6c16bcb56ca586aa8a8c0e47
- SSDEEP 24576:9h6Ur/ib3xM7dLtJYV+FZad9MChKTNrKWz7vUifgpKyAv9qv:9hLbibedfOnqCwNV7vP8Ky+9qv
- TLSH T1EC95D049AB5440E1D1B6C17889439946E6B2BC005B71EBDF02D8F73A2F376E19D3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.