Analysis
- max time kernel
149s - max time network
146s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
09/07/2026, 14:50
General
- Target 2026-07-09_545f88e62ccb77de9f51d045be512040_icedid_njrat_ryuk.exe
- Size 691KB
- Sample260709-r7jnnads21
- SHA256 98b80ceed2a52be0bf640249a2ca5e2da3e371859d1238f8eb6071281a293ef8
Score
6/10
Malware Config
Signatures
- Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in Program Files directory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-09_545f88e62ccb77de9f51d045be512040_icedid_njrat_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-09_545f88e62ccb77de9f51d045be512040_icedid_njrat_ryuk.exe"1⤵
- Enumerates connected drives
- Drops file in Program Files directory
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4032-0-0x00007FF773CE0000-0x00007FF773D84000-memory.dmp
memory/4032-1-0x00000228F4190000-0x00000228F4195000-memory.dmp
memory/4032-3-0x00000228F4190000-0x00000228F4195000-memory.dmp
memory/4032-6-0x00000228F4190000-0x00000228F4195000-memory.dmp
memory/4032-2-0x00000228F4170000-0x00000228F4177000-memory.dmp