General
- Target 2026-07-12_b2706b1d75033f56e42d62313199ae00_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260712-xtz2dafy2p
- SHA256 2af08afde52bcfa25cbe0e8d533f27511330f6e1533a14c22845a9d6e669696d
- MD5 b2706b1d75033f56e42d62313199ae00
- SHA1 07864a93d9e0026d36365a0940d8ab3ce2b3c49d
- SHA512 bb9716d269762b9e4ba23bc2447ddfda1756e9e05355d4d39e83ee51cd68e10ffbab9de507c76368281282f783a204e2e48d8b9ec696dfb7371b56ebc37242c4
- SSDEEP 49152:q8/PnSWzRwgh3XAL8Njmbb/pedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyWs:56H3/ped+UsiC96oC
- TLSH T1E4266C03F2E941D8F0AAE2789B765732EE72BC568B3065DF025036151E76EE05B3C762
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-07-12_b2706b1d75033f56e42d62313199ae00_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 2af08afde52bcfa25cbe0e8d533f27511330f6e1533a14c22845a9d6e669696d
- MD5 b2706b1d75033f56e42d62313199ae00
- SHA1 07864a93d9e0026d36365a0940d8ab3ce2b3c49d
- SHA512 bb9716d269762b9e4ba23bc2447ddfda1756e9e05355d4d39e83ee51cd68e10ffbab9de507c76368281282f783a204e2e48d8b9ec696dfb7371b56ebc37242c4
- SSDEEP 49152:q8/PnSWzRwgh3XAL8Njmbb/pedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyWs:56H3/ped+UsiC96oC
- TLSH T1E4266C03F2E941D8F0AAE2789B765732EE72BC568B3065DF025036151E76EE05B3C762
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1