General
- Target 2026-07-13_7425826e50735565d67cd1323b36a230_icedid_mespinoza_njrat_ryuk
- Size 1.5MB
- Sample260713-bhcaaacw91
- SHA256 241d55c00ee222cfd766f71db3802feaa4bb7f064fd8e25fab5d7ba7985f0b5d
- MD5 7425826e50735565d67cd1323b36a230
- SHA1 2a6bd8920d8f0901660b380c40abc13e6f338bf6
- SHA512 0b9c020afa3fd9bba7afcd473b24beebf5aba2324ae7d10b135d7431f184055f6143a799b97261de8dc05c55272d819d68acf9cc5eb96750da6d184b42f69ddf
- SSDEEP 24576:hveL/W+ec7DArrGluKGnsqjnhMgeiCl7G0nehbGZpbD:hm/W+ec7YGl8Dmg27RnWGj
- TLSH T1DA75E159F7E500F8E1B39634CDB58606E6733C965A308B5F23E9865A2F736508E38732
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_7425826e50735565d67cd1323b36a230_icedid_mespinoza_njrat_ryuk.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_7425826e50735565d67cd1323b36a230_icedid_mespinoza_njrat_ryuk.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_7425826e50735565d67cd1323b36a230_icedid_mespinoza_njrat_ryuk
- Size 1.5MB
- SHA256 241d55c00ee222cfd766f71db3802feaa4bb7f064fd8e25fab5d7ba7985f0b5d
- MD5 7425826e50735565d67cd1323b36a230
- SHA1 2a6bd8920d8f0901660b380c40abc13e6f338bf6
- SHA512 0b9c020afa3fd9bba7afcd473b24beebf5aba2324ae7d10b135d7431f184055f6143a799b97261de8dc05c55272d819d68acf9cc5eb96750da6d184b42f69ddf
- SSDEEP 24576:hveL/W+ec7DArrGluKGnsqjnhMgeiCl7G0nehbGZpbD:hm/W+ec7YGl8Dmg27RnWGj
- TLSH T1DA75E159F7E500F8E1B39634CDB58606E6733C965A308B5F23E9865A2F736508E38732
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory