General

  • Target
    2026-07-23_268563e92d010b49ab43f2bf31932ffd_icedid_mespinoza_njrat_ryuk
  • Size 1.9MB
  • Sample260723-nap8ds1vbz
  • SHA256 1b37a975860ca65a2fcbf8fa416a0130491567faa78024d17abd3662a8de9855
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-23_268563e92d010b49ab43f2bf31932ffd_icedid_mespinoza_njrat_ryuk
    • Size 1.9MB
    • SHA256 1b37a975860ca65a2fcbf8fa416a0130491567faa78024d17abd3662a8de9855
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks