General
- Target 2026-07-20_99111c8c87f1822a002bb4cf503c1128_icedid_mespinoza_njrat_ryuk
- Size 6.9MB
- Sample260720-k7hb9sft6v
- SHA256 0260b6a49767acf1050534d64ef41427b9d9bba77e4fddc42d5b855f7ac46d8b
- MD5 99111c8c87f1822a002bb4cf503c1128
- SHA1 cc32d8d4c5ba118b339671ede21e9ef3718864ae
- SHA512 c098b40b23c75a1d24986c663b56a6898d344057fb3bb848ae874aad04fe006f9dc14ad1f9e6f8fe3c8784bf07d2c51644864ae480162128b284f8baef149bd4
- SSDEEP 98304:2YAErA2sHpAUQYTC2bNu6YmjO7mecRjgYP/u9M3Zp6+gcori:2Yq2sHpAUQYTC2bDYmCH9UL6hC
- TLSH T1A9769D86ABA480D5D03AD03CC996855BD7B2BC241B318BEF5065A65F1F336D20F3AB35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_99111c8c87f1822a002bb4cf503c1128_icedid_mespinoza_njrat_ryuk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_99111c8c87f1822a002bb4cf503c1128_icedid_mespinoza_njrat_ryuk.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_99111c8c87f1822a002bb4cf503c1128_icedid_mespinoza_njrat_ryuk
- Size 6.9MB
- SHA256 0260b6a49767acf1050534d64ef41427b9d9bba77e4fddc42d5b855f7ac46d8b
- MD5 99111c8c87f1822a002bb4cf503c1128
- SHA1 cc32d8d4c5ba118b339671ede21e9ef3718864ae
- SHA512 c098b40b23c75a1d24986c663b56a6898d344057fb3bb848ae874aad04fe006f9dc14ad1f9e6f8fe3c8784bf07d2c51644864ae480162128b284f8baef149bd4
- SSDEEP 98304:2YAErA2sHpAUQYTC2bNu6YmjO7mecRjgYP/u9M3Zp6+gcori:2Yq2sHpAUQYTC2bDYmCH9UL6hC
- TLSH T1A9769D86ABA480D5D03AD03CC996855BD7B2BC241B318BEF5065A65F1F336D20F3AB35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.