General
- Target 2026-07-13_a5934d0a53e9a80d083a4d3fdee754a5_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260713-1gscjsa161
- SHA256 3a6c21d9fa4e83260938cd9d45d0f69c6f5322fc80973cbc56907019f87b3603
- MD5 a5934d0a53e9a80d083a4d3fdee754a5
- SHA1 c97e39d023003a66450a25c8ba5f1014b41ce012
- SHA512 fba6c13116d2e340e2932a8057a35d93642959a77b2386111a4079f0213cb6813fc48526e4e876d654df46bb38c2585146a368c78731225aa8aa51319394b21c
- SSDEEP 49152:BHO1jHXiad8v3XAL8Njmbb/gedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyWH:kNH3/ged+UsiC96M
- TLSH T190266C03F2E941D8F0AEE2789B765732EE72BC568B30A5DF025036151E76EE05B38761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-07-13_a5934d0a53e9a80d083a4d3fdee754a5_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 3a6c21d9fa4e83260938cd9d45d0f69c6f5322fc80973cbc56907019f87b3603
- MD5 a5934d0a53e9a80d083a4d3fdee754a5
- SHA1 c97e39d023003a66450a25c8ba5f1014b41ce012
- SHA512 fba6c13116d2e340e2932a8057a35d93642959a77b2386111a4079f0213cb6813fc48526e4e876d654df46bb38c2585146a368c78731225aa8aa51319394b21c
- SSDEEP 49152:BHO1jHXiad8v3XAL8Njmbb/gedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyWH:kNH3/ged+UsiC96M
- TLSH T190266C03F2E941D8F0AEE2789B765732EE72BC568B30A5DF025036151E76EE05B38761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1