General
- Target 2026-07-11_266b60de0130ed4b43cd8c1ff9b1294a_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260711-a2m1fshx2p
- SHA256 d1c44e83aacb13bebce41da1314751b63945f90b2d1c584a902a921ef52af5d7
- MD5 266b60de0130ed4b43cd8c1ff9b1294a
- SHA1 00e331d42a13a83d74f27a46ce37640dfe1d0dd4
- SHA512 a427bbf6c5229c8a7152fb7f6df22aff9f85e90814ec9f1e74a6facb1916eec64ba8812d45763180df04c06bd05ae329a2d9e4dbdd216cb25399addc7b7fac66
- SSDEEP 49152:6oKDFiks7lLQfu3XAL8Njmbb/Uedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsH4:C0UH3/Ued+UsiC96aywU
- TLSH T18C266C03F2E941D8F0AAE2789B765732EE72BC568B3065DF025036151E76EE05B3C762
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-07-11_266b60de0130ed4b43cd8c1ff9b1294a_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 d1c44e83aacb13bebce41da1314751b63945f90b2d1c584a902a921ef52af5d7
- MD5 266b60de0130ed4b43cd8c1ff9b1294a
- SHA1 00e331d42a13a83d74f27a46ce37640dfe1d0dd4
- SHA512 a427bbf6c5229c8a7152fb7f6df22aff9f85e90814ec9f1e74a6facb1916eec64ba8812d45763180df04c06bd05ae329a2d9e4dbdd216cb25399addc7b7fac66
- SSDEEP 49152:6oKDFiks7lLQfu3XAL8Njmbb/Uedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsH4:C0UH3/Ued+UsiC96aywU
- TLSH T18C266C03F2E941D8F0AAE2789B765732EE72BC568B3065DF025036151E76EE05B3C762
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1