General
- Target 2026-07-12_d97fa74cd3cf08f573ddc3d76ae749e4_icedid_njrat_ryuk
- Size 964KB
- Sample260712-nglhsagy3p
- SHA256 c03994ce249c75c849febff38f3d782f4f5a8fb929614193d1911de527b88068
- MD5 d97fa74cd3cf08f573ddc3d76ae749e4
- SHA1 743abd92461c85f8b44090503f51f7cdcc30034b
- SHA512 5e77e1c267b2a0c3b8470d41498b4e870d9a2ca827dae6836dc5e84ffe4d32ca323f5f061dfdc48b281fba80d5f13a39b24344500b2f833f393aeb16c7d22089
- SSDEEP 24576:86IRzVakfCrljcO36Sib8RZfa7uHbLqRAUK:8xRzVakfCrlbDM8b8u7Lqu
- TLSH T17725F145F7A430F6D9A7C13C98629913F972785D0B20EBDB03A84A461F636F15E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_d97fa74cd3cf08f573ddc3d76ae749e4_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_d97fa74cd3cf08f573ddc3d76ae749e4_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_d97fa74cd3cf08f573ddc3d76ae749e4_icedid_njrat_ryuk
- Size 964KB
- SHA256 c03994ce249c75c849febff38f3d782f4f5a8fb929614193d1911de527b88068
- MD5 d97fa74cd3cf08f573ddc3d76ae749e4
- SHA1 743abd92461c85f8b44090503f51f7cdcc30034b
- SHA512 5e77e1c267b2a0c3b8470d41498b4e870d9a2ca827dae6836dc5e84ffe4d32ca323f5f061dfdc48b281fba80d5f13a39b24344500b2f833f393aeb16c7d22089
- SSDEEP 24576:86IRzVakfCrljcO36Sib8RZfa7uHbLqRAUK:8xRzVakfCrlbDM8b8u7Lqu
- TLSH T17725F145F7A430F6D9A7C13C98629913F972785D0B20EBDB03A84A461F636F15E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1