General
- Target 2026-07-27_8f2f47385da88038e6d2c9010502d861_icedid_mespinoza_njrat_ryuk
- Size 1.1MB
- Sample260727-c84ynavtcv
- SHA256 20615255f6717ee6f4cc4c08a1dbaacdd95f405535e16419ff5b766500700c11
- MD5 8f2f47385da88038e6d2c9010502d861
- SHA1 57be134333c0aae48d2bae3fe89e1ac7bd59471a
- SHA512 c1e2e507598a07f25cc1586ec1e4e9c89872252b6813888b0a4c06586a346908bcfa3594e335387e07d8add4603ed044f5657b7ac0fe10806c65b527176a0c00
- SSDEEP 24576:a5phzGIvN8KFeWROc/Px13mD4/wzXyuWk9rhuo5NVoP1ovLW0Zna/0e0+KI+i9fO:ChzXDeWROc/513mDzryu56tKJG0zFIx7
- TLSH T1CC45E045A7F501A8E0B3D634CA664653FBB378525930DB5F03A58A9B2F337608F39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_8f2f47385da88038e6d2c9010502d861_icedid_mespinoza_njrat_ryuk.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_8f2f47385da88038e6d2c9010502d861_icedid_mespinoza_njrat_ryuk.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_8f2f47385da88038e6d2c9010502d861_icedid_mespinoza_njrat_ryuk
- Size 1.1MB
- SHA256 20615255f6717ee6f4cc4c08a1dbaacdd95f405535e16419ff5b766500700c11
- MD5 8f2f47385da88038e6d2c9010502d861
- SHA1 57be134333c0aae48d2bae3fe89e1ac7bd59471a
- SHA512 c1e2e507598a07f25cc1586ec1e4e9c89872252b6813888b0a4c06586a346908bcfa3594e335387e07d8add4603ed044f5657b7ac0fe10806c65b527176a0c00
- SSDEEP 24576:a5phzGIvN8KFeWROc/Px13mD4/wzXyuWk9rhuo5NVoP1ovLW0Zna/0e0+KI+i9fO:ChzXDeWROc/513mDzryu56tKJG0zFIx7
- TLSH T1CC45E045A7F501A8E0B3D634CA664653FBB378525930DB5F03A58A9B2F337608F39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1