General
- Target 2026-07-24_b08d6146ad106f2bde855a494f778cd0_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260724-wh5l2stxcs
- SHA256 99df5fa436b51d1066ce02d52046e7f9b1e1932c8e6d4af0736df607a1f51e94
- MD5 b08d6146ad106f2bde855a494f778cd0
- SHA1 13c6f556507d2070cebcd0ae14ef72a6cdb88384
- SHA512 09d6117ebfe0162a3faf9c3338bb9bbd1e4277d2c9a25bcbcb09608d57f10b2784efbd0bd2d16de866891b5f32239c6d92889c674b9f3affc1334176447a80b8
- SSDEEP 49152:4dfHxNswyKEs3XAL8Njmbb//edc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyWB:yQH3//ed+UsiC9656j
- TLSH T1DE266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-07-24_b08d6146ad106f2bde855a494f778cd0_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 99df5fa436b51d1066ce02d52046e7f9b1e1932c8e6d4af0736df607a1f51e94
- MD5 b08d6146ad106f2bde855a494f778cd0
- SHA1 13c6f556507d2070cebcd0ae14ef72a6cdb88384
- SHA512 09d6117ebfe0162a3faf9c3338bb9bbd1e4277d2c9a25bcbcb09608d57f10b2784efbd0bd2d16de866891b5f32239c6d92889c674b9f3affc1334176447a80b8
- SSDEEP 49152:4dfHxNswyKEs3XAL8Njmbb//edc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyWB:yQH3//ed+UsiC9656j
- TLSH T1DE266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1