General
- Target 2026-07-10_7af672f7dc52334b52af7ba9b5cb7559_icedid_njrat_ryuk
- Size 691KB
- Sample260710-nv1vmaby4t
- SHA256 3fa8729b2a9af1b4f77ba0ea5266a9d7f26af14bd5a197f4183859a9f3e7e7c9
- MD5 7af672f7dc52334b52af7ba9b5cb7559
- SHA1 0bdde334b5bb7e4ec7c07c240e0f1bba22a59d86
- SHA512 376137246d84b3ecce1d3e3fb6d14ba78dd533c585a6991b1ca3a6b9f1587d7a104faf80afdfd06dc59d9df6cc14124643630ca2954836c250a4d5e9b052b0ac
- SSDEEP 6144:2N+Sz4n9eMQ/ps9JtKLz4/WSLLivCOgCuzosU09xJTtP7/F30V/1eY4Yb:2N+Sj/ps9Dqz7q0gCuz9P9MF1gE
- TLSH T137E4C451BBA449B1F0B299348975866D9B327C55C923CE0F20959EDEFFF39808D24B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_7af672f7dc52334b52af7ba9b5cb7559_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_7af672f7dc52334b52af7ba9b5cb7559_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_7af672f7dc52334b52af7ba9b5cb7559_icedid_njrat_ryuk
- Size 691KB
- SHA256 3fa8729b2a9af1b4f77ba0ea5266a9d7f26af14bd5a197f4183859a9f3e7e7c9
- MD5 7af672f7dc52334b52af7ba9b5cb7559
- SHA1 0bdde334b5bb7e4ec7c07c240e0f1bba22a59d86
- SHA512 376137246d84b3ecce1d3e3fb6d14ba78dd533c585a6991b1ca3a6b9f1587d7a104faf80afdfd06dc59d9df6cc14124643630ca2954836c250a4d5e9b052b0ac
- SSDEEP 6144:2N+Sz4n9eMQ/ps9JtKLz4/WSLLivCOgCuzosU09xJTtP7/F30V/1eY4Yb:2N+Sj/ps9Dqz7q0gCuz9P9MF1gE
- TLSH T137E4C451BBA449B1F0B299348975866D9B327C55C923CE0F20959EDEFFF39808D24B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.