General
- Target 2026-07-23_0087beeb0cdef5033f6b5343d18d65a6_icedid_mespinoza_njrat_ryuk
- Size 16.6MB
- Sample260724-atedcayse1
- SHA256 e5b5ae2f262a00a5b324332fc66d9f66bb53e67f04b232f4eb0ce1223cb5367d
- MD5 0087beeb0cdef5033f6b5343d18d65a6
- SHA1 a2230afdc798d2e695ab23a69785702082c2d0e4
- SHA512 1d2e7043901bffb8f4c59349f87de78a9d835f8a57d515dcbff8e0ee0c34c44dc6135ebd13da3b39a682b320b9c9ca4cdf183616fb6fa8cdeda173c3682e7743
- SSDEEP 98304:5xbOL0FaMw+2pkyEalkUiH0CEXrGpQlTZLplj5QyEDLW4tkqJS0hp:5xbOifamhEXrR1Lzj5GDLW7qJND
- TLSH T13F070212F750C4BAD067423049579A96E772BC540B329FFF93F4B62A6E336908E2E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_0087beeb0cdef5033f6b5343d18d65a6_icedid_mespinoza_njrat_ryuk.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_0087beeb0cdef5033f6b5343d18d65a6_icedid_mespinoza_njrat_ryuk.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_0087beeb0cdef5033f6b5343d18d65a6_icedid_mespinoza_njrat_ryuk
- Size 16.6MB
- SHA256 e5b5ae2f262a00a5b324332fc66d9f66bb53e67f04b232f4eb0ce1223cb5367d
- MD5 0087beeb0cdef5033f6b5343d18d65a6
- SHA1 a2230afdc798d2e695ab23a69785702082c2d0e4
- SHA512 1d2e7043901bffb8f4c59349f87de78a9d835f8a57d515dcbff8e0ee0c34c44dc6135ebd13da3b39a682b320b9c9ca4cdf183616fb6fa8cdeda173c3682e7743
- SSDEEP 98304:5xbOL0FaMw+2pkyEalkUiH0CEXrGpQlTZLplj5QyEDLW4tkqJS0hp:5xbOifamhEXrR1Lzj5GDLW7qJND
- TLSH T13F070212F750C4BAD067423049579A96E772BC540B329FFF93F4B62A6E336908E2E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Loads dropped DLL