General
- Target 2026-07-17_b4c01d0fc6c9b8a871b8ffb3d2fa892c_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260718-cwwfradt4k
- SHA256 e194ca0472bc3b3eafec46c1cf6608f96872fcfa85133976eed7b87bc944a534
- MD5 b4c01d0fc6c9b8a871b8ffb3d2fa892c
- SHA1 418ba570e10ca271267518ab9dfe6a411ae88dcb
- SHA512 fe884f842d8b9c6bb19bf011c5fd8a36906e1eef81499c005722ae49b014c52838a4d0a0e40ab491dbdde54cbe7ecdec5fc74ade1a70e6945638af324ca666cf
- SSDEEP 49152:5LhxwPWDXguB3XAL8Njmbb/Hedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyWz:JYH3/Hed+UsiC96bPGd
- TLSH T182266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-07-17_b4c01d0fc6c9b8a871b8ffb3d2fa892c_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 e194ca0472bc3b3eafec46c1cf6608f96872fcfa85133976eed7b87bc944a534
- MD5 b4c01d0fc6c9b8a871b8ffb3d2fa892c
- SHA1 418ba570e10ca271267518ab9dfe6a411ae88dcb
- SHA512 fe884f842d8b9c6bb19bf011c5fd8a36906e1eef81499c005722ae49b014c52838a4d0a0e40ab491dbdde54cbe7ecdec5fc74ade1a70e6945638af324ca666cf
- SSDEEP 49152:5LhxwPWDXguB3XAL8Njmbb/Hedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyWz:JYH3/Hed+UsiC96bPGd
- TLSH T182266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1