General
- Target 2026-07-08_d3b478493cd2aa5bda35b64f793fb9fe_icedid_mespinoza_njrat_ryuk
- Size 1016KB
- Sample260708-ynb8ssfy8r
- SHA256 ef2cd72e7ee18a4d297416a4f9c332aaecffc682f63e418eadc4c17968f5cf7d
- MD5 d3b478493cd2aa5bda35b64f793fb9fe
- SHA1 3a6bdf7aec36d6b7f24fde896aaf8d9c2350d7fc
- SHA512 1535bb7101e423d2adce200aaf092f8fcdb5fa2ef652d44271db846a343ad34133ddbe936364671c474d35eeecbd5000ef9d54e40ae36d865ae134964438a21d
- SSDEEP 12288:e8x8rI6QZNIxWKwcdklHPA/ivVctMEHRyEs4oRt322q7ADj0yFczYEj:e8xtxIEKwcdklHP4IctnHRVWgCj0ywD
- TLSH T13F255B15B7E945E8E0B7923A89618161F7B2BC121B31DBDF4250731E1F37AD44E3AB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_d3b478493cd2aa5bda35b64f793fb9fe_icedid_mespinoza_njrat_ryuk.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_d3b478493cd2aa5bda35b64f793fb9fe_icedid_mespinoza_njrat_ryuk.exe
Resource
win11ltsc2024-20260706-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_d3b478493cd2aa5bda35b64f793fb9fe_icedid_mespinoza_njrat_ryuk
- Size 1016KB
- SHA256 ef2cd72e7ee18a4d297416a4f9c332aaecffc682f63e418eadc4c17968f5cf7d
- MD5 d3b478493cd2aa5bda35b64f793fb9fe
- SHA1 3a6bdf7aec36d6b7f24fde896aaf8d9c2350d7fc
- SHA512 1535bb7101e423d2adce200aaf092f8fcdb5fa2ef652d44271db846a343ad34133ddbe936364671c474d35eeecbd5000ef9d54e40ae36d865ae134964438a21d
- SSDEEP 12288:e8x8rI6QZNIxWKwcdklHPA/ivVctMEHRyEs4oRt322q7ADj0yFczYEj:e8xtxIEKwcdklHP4IctnHRVWgCj0ywD
- TLSH T13F255B15B7E945E8E0B7923A89618161F7B2BC121B31DBDF4250731E1F37AD44E3AB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.