General
- Target 2026-07-08_8f9400f8188382c649fc9ea2ae41b94d_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260708-ltdycsez8m
- SHA256 0c1f9ba881841f0912d83eb00eb560611d0ca38e24fd08cbd4399f459d22951f
- MD5 8f9400f8188382c649fc9ea2ae41b94d
- SHA1 a17b49897a03ddf13dcbff69ae742a22020aecea
- SHA512 d52fd126b81ead8b2c1e267ab29e2324ddde0ad5cb7ba4b1d95dda7c9e9332f77e132cabbe0d0274ebdaa76ef536c65c95f4007e20a32f2eea019e712f0a8190
- SSDEEP 49152:Of8rFa79kdrdu3XAL8Njmbb/gedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyR:jFH3/ged+UsiC96z
- TLSH T1DB266C03F2E941D8F0AEE2789B765732EE72BC568B30A5DF025036151E76EE05B38761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-07-08_8f9400f8188382c649fc9ea2ae41b94d_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 0c1f9ba881841f0912d83eb00eb560611d0ca38e24fd08cbd4399f459d22951f
- MD5 8f9400f8188382c649fc9ea2ae41b94d
- SHA1 a17b49897a03ddf13dcbff69ae742a22020aecea
- SHA512 d52fd126b81ead8b2c1e267ab29e2324ddde0ad5cb7ba4b1d95dda7c9e9332f77e132cabbe0d0274ebdaa76ef536c65c95f4007e20a32f2eea019e712f0a8190
- SSDEEP 49152:Of8rFa79kdrdu3XAL8Njmbb/gedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyR:jFH3/ged+UsiC96z
- TLSH T1DB266C03F2E941D8F0AEE2789B765732EE72BC568B30A5DF025036151E76EE05B38761
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1