General
- Target 2026-07-20_541675d8d67d7b20777ff50295be599e_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260720-nytkqagz3q
- SHA256 57b8bd3ce190a2585642754849c9e8a03e3775e22764f37ca89922fda9ec0548
- MD5 541675d8d67d7b20777ff50295be599e
- SHA1 0ce3f42e9de18542a1c98b6090f60106fcad0716
- SHA512 059b97be2a7e5eeb1a76e1eede2079a43187c4bce62610ef1ff7a34b3ee8c15c5d080deccdc9270c5295f74b3e12b6ba1172a00a0ef38500ad08ff50a51a5ee4
- SSDEEP 49152:9CYi/FYsaT49ol3XAL8Njmbb/uedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsH6:gKmrH3/ued+UsiC96/oU
- TLSH T151266C03F2E941D8F0AAE2789B365732EE72BC568B34A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-07-20_541675d8d67d7b20777ff50295be599e_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 57b8bd3ce190a2585642754849c9e8a03e3775e22764f37ca89922fda9ec0548
- MD5 541675d8d67d7b20777ff50295be599e
- SHA1 0ce3f42e9de18542a1c98b6090f60106fcad0716
- SHA512 059b97be2a7e5eeb1a76e1eede2079a43187c4bce62610ef1ff7a34b3ee8c15c5d080deccdc9270c5295f74b3e12b6ba1172a00a0ef38500ad08ff50a51a5ee4
- SSDEEP 49152:9CYi/FYsaT49ol3XAL8Njmbb/uedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsH6:gKmrH3/ued+UsiC96/oU
- TLSH T151266C03F2E941D8F0AAE2789B365732EE72BC568B34A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1