General
- Target 2026-07-13_03ba6020731319fcb28c06c30a11a27c_icedid_mespinoza_njrat_ryuk
- Size 13.5MB
- Sample260714-can5jscv4n
- SHA256 d40e86ebd1e22f2d6151606ed884e75b0bcddb0d35565bd3f02eed062f4d8490
- MD5 03ba6020731319fcb28c06c30a11a27c
- SHA1 d2103a85bf4840a5b0357054dde853fb81fda5de
- SHA512 0bc451fb1afcec351b9f31e0d0acceb97e080eaecded57cba391e4de632844858670458a7e5a4a8084a7a9845898b02a57da91ed7d85ac77e26d0600611ad1fc
- SSDEEP 98304:+50Ft2K3a7L7pLLTLSh/uxXrcl7wRGpj3:+5KtsTmSiF9
- TLSH T188E6167A56B4C188C1955037C54A4CFA936DBC11D8B3927BDA883E37FA3E1D0C9BE219
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_03ba6020731319fcb28c06c30a11a27c_icedid_mespinoza_njrat_ryuk.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_03ba6020731319fcb28c06c30a11a27c_icedid_mespinoza_njrat_ryuk
- Size 13.5MB
- SHA256 d40e86ebd1e22f2d6151606ed884e75b0bcddb0d35565bd3f02eed062f4d8490
- MD5 03ba6020731319fcb28c06c30a11a27c
- SHA1 d2103a85bf4840a5b0357054dde853fb81fda5de
- SHA512 0bc451fb1afcec351b9f31e0d0acceb97e080eaecded57cba391e4de632844858670458a7e5a4a8084a7a9845898b02a57da91ed7d85ac77e26d0600611ad1fc
- SSDEEP 98304:+50Ft2K3a7L7pLLTLSh/uxXrcl7wRGpj3:+5KtsTmSiF9
- TLSH T188E6167A56B4C188C1955037C54A4CFA936DBC11D8B3927BDA883E37FA3E1D0C9BE219
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1