General
- Target 2026-07-20_cd0400f956b71d6b892e485f72ab2de4_icedid_njrat_ryuk
- Size 964KB
- Sample260720-c2bzasft6v
- SHA256 b243febddb95b7522222937a5bb774e7eb324f89d9efaf5b7956372b490f42eb
- MD5 cd0400f956b71d6b892e485f72ab2de4
- SHA1 a48ad08aea8a20025e4201a81814bf4448184d13
- SHA512 d7ae71bb8f2fc37055c5d0cd23dc2c633aa1d115e51c1bccb963d26516f94716f1638932e1b45cd3e4a4cf0663de4e46a15bd2e989a8f0d2c0e3894f6ef291a2
- SSDEEP 24576:FTIRzVakfCrljcDPBasaU5oL9eJwoz3lYjWNdK7:FkRzVakfCrlPUU9eJwOCCNM
- TLSH T1DA250256EBA100F5D877D13C89524617E672786D0734EBDF02AC8A0A1F636F25E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_cd0400f956b71d6b892e485f72ab2de4_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_cd0400f956b71d6b892e485f72ab2de4_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_cd0400f956b71d6b892e485f72ab2de4_icedid_njrat_ryuk
- Size 964KB
- SHA256 b243febddb95b7522222937a5bb774e7eb324f89d9efaf5b7956372b490f42eb
- MD5 cd0400f956b71d6b892e485f72ab2de4
- SHA1 a48ad08aea8a20025e4201a81814bf4448184d13
- SHA512 d7ae71bb8f2fc37055c5d0cd23dc2c633aa1d115e51c1bccb963d26516f94716f1638932e1b45cd3e4a4cf0663de4e46a15bd2e989a8f0d2c0e3894f6ef291a2
- SSDEEP 24576:FTIRzVakfCrljcDPBasaU5oL9eJwoz3lYjWNdK7:FkRzVakfCrlPUU9eJwOCCNM
- TLSH T1DA250256EBA100F5D877D13C89524617E672786D0734EBDF02AC8A0A1F636F25E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1