General
- Target 2026-07-15_a3a37bc66ef9c92fd529cc35348ca26a_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260715-3h83ssbv41
- SHA256 fd7e6bcdde86e28b40161023a046b26a5ddcc076e53b929888723c29a1b59496
- MD5 a3a37bc66ef9c92fd529cc35348ca26a
- SHA1 b754cad51fd02a7f3a8bbd403b4b8809c4d4b042
- SHA512 c66372db8fd1c17cc5f954b1af7a2c70ca4a13f49e32608f7c023091da60d765ef50e2e2fefd908417ea422e9703f240d59408cb48c4fd7912d995f0a167fccf
- SSDEEP 49152:aAf+PMNpPLGVu43XAL8Njmbb/dedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHQ:F/H3/ded+UsiC96qTm
- TLSH T133266C03F2E941D8F0AEE2789B765732EE72BC568B3065DF025036151E76EE05B38762
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-07-15_a3a37bc66ef9c92fd529cc35348ca26a_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 fd7e6bcdde86e28b40161023a046b26a5ddcc076e53b929888723c29a1b59496
- MD5 a3a37bc66ef9c92fd529cc35348ca26a
- SHA1 b754cad51fd02a7f3a8bbd403b4b8809c4d4b042
- SHA512 c66372db8fd1c17cc5f954b1af7a2c70ca4a13f49e32608f7c023091da60d765ef50e2e2fefd908417ea422e9703f240d59408cb48c4fd7912d995f0a167fccf
- SSDEEP 49152:aAf+PMNpPLGVu43XAL8Njmbb/dedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHQ:F/H3/ded+UsiC96qTm
- TLSH T133266C03F2E941D8F0AEE2789B765732EE72BC568B3065DF025036151E76EE05B38762
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1