General
- Target 2026-07-19_3e8e62db9ed9aa57c906343ebc43dbc0_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260719-me6khahs5m
- SHA256 18009760af62e1a02811fa56901713729c479735be2503df32d33122f7d9461f
- MD5 3e8e62db9ed9aa57c906343ebc43dbc0
- SHA1 29104b086d9e67e6916f9cc8f8dc20017fbccc73
- SHA512 d9eb58b0e48a0f1b48498be245c9d7ad9ec55d09113e62da983ede346ea314eedf77b7eae416d2f7ddfd14ab3105415c28a1eb4003a82544fa58a13b414655bb
- SSDEEP 49152:d3b5BzNkSX/N9Ox3XAL8Njmbb/cedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40Nsm:BfH3/ced+UsiC96cu
- TLSH T170266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-07-19_3e8e62db9ed9aa57c906343ebc43dbc0_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 18009760af62e1a02811fa56901713729c479735be2503df32d33122f7d9461f
- MD5 3e8e62db9ed9aa57c906343ebc43dbc0
- SHA1 29104b086d9e67e6916f9cc8f8dc20017fbccc73
- SHA512 d9eb58b0e48a0f1b48498be245c9d7ad9ec55d09113e62da983ede346ea314eedf77b7eae416d2f7ddfd14ab3105415c28a1eb4003a82544fa58a13b414655bb
- SSDEEP 49152:d3b5BzNkSX/N9Ox3XAL8Njmbb/cedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40Nsm:BfH3/ced+UsiC96cu
- TLSH T170266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1