General
- Target 2026-07-18_4e798f02c92a64d035ab306046c34570_icedid_njrat_ryuk
- Size 782KB
- Sample260718-jy71wsds9p
- SHA256 2eef9e0f02104f373b2543d3278853ec5cde86d032f112be9661f081b9402546
- MD5 4e798f02c92a64d035ab306046c34570
- SHA1 18beb2218246ba5a417779d4fdcb7b5f60f7bf31
- SHA512 f50d478218578ea584872172a257714ae3d07c5c337da000fb2d3db047a54b74fbb979c37f347893c9a04ee6fb9b44cd30137d73099e3d3e094a5c74efa6c6db
- SSDEEP 24576:B7sBnSb8nQI6pAJHXLBhvn/+h1Bfr55JPG:CBnSbz3pmHbBh34n558
- TLSH T1D405D068F2970CFCD8738EF8ABA15616D172FB421720E21F366A459ECF226719E34711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_4e798f02c92a64d035ab306046c34570_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_4e798f02c92a64d035ab306046c34570_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_4e798f02c92a64d035ab306046c34570_icedid_njrat_ryuk
- Size 782KB
- SHA256 2eef9e0f02104f373b2543d3278853ec5cde86d032f112be9661f081b9402546
- MD5 4e798f02c92a64d035ab306046c34570
- SHA1 18beb2218246ba5a417779d4fdcb7b5f60f7bf31
- SHA512 f50d478218578ea584872172a257714ae3d07c5c337da000fb2d3db047a54b74fbb979c37f347893c9a04ee6fb9b44cd30137d73099e3d3e094a5c74efa6c6db
- SSDEEP 24576:B7sBnSb8nQI6pAJHXLBhvn/+h1Bfr55JPG:CBnSbz3pmHbBh34n558
- TLSH T1D405D068F2970CFCD8738EF8ABA15616D172FB421720E21F366A459ECF226719E34711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Disables taskbar notifications via registry modification
-
Executes dropped EXE
-
Windows security modification
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory