General
- Target 2026-07-10_817699a8f7540bfcf6875e0fcbd39e41_icedid_njrat_ryuk
- Size 1.7MB
- Sample260710-mdck2ahw7n
- SHA256 21664d9cff2597544df8692dc247775e1c4e9ecf5e20b66bf0860ce6dccf1552
- MD5 817699a8f7540bfcf6875e0fcbd39e41
- SHA1 e76f968e05dfce4f7c7b9ab3ce603803ea84d212
- SHA512 543c471a82b9d92897e2ffad891bb7ed1d2ca97f5ce3f5ee7a4d7f73d81357df069a5a8252e2a34cd08c26028a25465f7bb6a3bf5ac3549b5c07b22ed4058339
- SSDEEP 24576:qxYsCBWslQtU0dd8FcWcyCL1yrtSAzSpNjtnAHcnQO/k:6C7lQtUbcyCZKtzSpNRoO8
- TLSH T1A285D069B75846F5E0679138C9528546E3B278051B21D78F13E8A37E2F336E09E3FB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_817699a8f7540bfcf6875e0fcbd39e41_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_817699a8f7540bfcf6875e0fcbd39e41_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_817699a8f7540bfcf6875e0fcbd39e41_icedid_njrat_ryuk
- Size 1.7MB
- SHA256 21664d9cff2597544df8692dc247775e1c4e9ecf5e20b66bf0860ce6dccf1552
- MD5 817699a8f7540bfcf6875e0fcbd39e41
- SHA1 e76f968e05dfce4f7c7b9ab3ce603803ea84d212
- SHA512 543c471a82b9d92897e2ffad891bb7ed1d2ca97f5ce3f5ee7a4d7f73d81357df069a5a8252e2a34cd08c26028a25465f7bb6a3bf5ac3549b5c07b22ed4058339
- SSDEEP 24576:qxYsCBWslQtU0dd8FcWcyCL1yrtSAzSpNjtnAHcnQO/k:6C7lQtUbcyCZKtzSpNRoO8
- TLSH T1A285D069B75846F5E0679138C9528546E3B278051B21D78F13E8A37E2F336E09E3FB21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory