General
- Target 2026-07-11_691c7f02ee5b661fdff9316b787990fe_icedid_mespinoza_njrat_ryuk
- Size 1.5MB
- Sample260711-gpypracw7l
- SHA256 9a378ef73fede7ad88dda81fda7f866b246bee3250291f516731ea848cb4d976
- MD5 691c7f02ee5b661fdff9316b787990fe
- SHA1 118591144bd271ab4d566b807ac912bb4535d3a8
- SHA512 cdc165c5259a1d08b170dbdeeb33c4b6f20b7099b046e53fd227ebde5ccd84237a6798b934948238acf9e050160f285424f3b700957abacf4ff23351ee1eebcb
- SSDEEP 24576:tggsO35/pvxHfJaMJWTTXPPC1X9qSH9Y6VyP:P3JhvxHfJvYrPs9HHC
- TLSH T1D365F11977A94CF9E933823C89524545E6B27C260B72DB9F0390821ADF376D09D3FB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_691c7f02ee5b661fdff9316b787990fe_icedid_mespinoza_njrat_ryuk.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_691c7f02ee5b661fdff9316b787990fe_icedid_mespinoza_njrat_ryuk
- Size 1.5MB
- SHA256 9a378ef73fede7ad88dda81fda7f866b246bee3250291f516731ea848cb4d976
- MD5 691c7f02ee5b661fdff9316b787990fe
- SHA1 118591144bd271ab4d566b807ac912bb4535d3a8
- SHA512 cdc165c5259a1d08b170dbdeeb33c4b6f20b7099b046e53fd227ebde5ccd84237a6798b934948238acf9e050160f285424f3b700957abacf4ff23351ee1eebcb
- SSDEEP 24576:tggsO35/pvxHfJaMJWTTXPPC1X9qSH9Y6VyP:P3JhvxHfJvYrPs9HHC
- TLSH T1D365F11977A94CF9E933823C89524545E6B27C260B72DB9F0390821ADF376D09D3FB22
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1