General
- Target 2026-07-10_3ba005f7db633184467ef06914b7b5b1_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260710-2rmqgsgs7w
- SHA256 4f52243bb5c95957c526227cb92e405e04352fe5bad2e7b9b5c866b628486563
- MD5 3ba005f7db633184467ef06914b7b5b1
- SHA1 4885272b440ff482d6e082a301a26e8695062a30
- SHA512 e5c887cad77b73f4b787e18b05c56923bb5d52b65c2ace40ac440f763d8c9a8137a53e0d0bd42f12517bd729874377656a1d3bcf8f9c4043d9d72f606be60a05
- SSDEEP 49152:QnI9m5qdifhY3XAL8Njmbb/hedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyW5:bKH3/hed+UsiC96SqvyP1
- TLSH T170266C03F2E941D8F0AEE2789B765732EE72BC568B3065DF025036151E76EE05B38762
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-07-10_3ba005f7db633184467ef06914b7b5b1_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 4f52243bb5c95957c526227cb92e405e04352fe5bad2e7b9b5c866b628486563
- MD5 3ba005f7db633184467ef06914b7b5b1
- SHA1 4885272b440ff482d6e082a301a26e8695062a30
- SHA512 e5c887cad77b73f4b787e18b05c56923bb5d52b65c2ace40ac440f763d8c9a8137a53e0d0bd42f12517bd729874377656a1d3bcf8f9c4043d9d72f606be60a05
- SSDEEP 49152:QnI9m5qdifhY3XAL8Njmbb/hedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyW5:bKH3/hed+UsiC96SqvyP1
- TLSH T170266C03F2E941D8F0AEE2789B765732EE72BC568B3065DF025036151E76EE05B38762
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1