General
- Target 2026-07-27_2bf3fbc4c3fe0b60d5bae64b5c0e2b58_icedid_njrat_ryuk
- Size 691KB
- Sample260727-pgrv8s1grf
- SHA256 df51a2f2bdf102871d53caf83546cd6fa987532065d8ded095c5e152b5f0ff82
- MD5 2bf3fbc4c3fe0b60d5bae64b5c0e2b58
- SHA1 18bc66d294d60edb9e493c990ec2372e7b9e3236
- SHA512 8c6fa66ea35a82db364b938b963b92ff8fc5ac918364a8ee9ba02f28d847c3e449a5ce2b718f583c3d3b0af60198841b41ab88508db734da391dc653ab1e2114
- SSDEEP 6144:7NGhPk3F9HYVQNs98iSz2uahLLLneB4uvWe6s109xJTtP7/F30Ggi5V23:7NGh3QNs98bzYDLuvWeTW9MGt5E3
- TLSH T1CBE4D451BBA449B1F0B299748975965C9B327C55C923CE0F2091AEDEFFF39808D24B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_2bf3fbc4c3fe0b60d5bae64b5c0e2b58_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_2bf3fbc4c3fe0b60d5bae64b5c0e2b58_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_2bf3fbc4c3fe0b60d5bae64b5c0e2b58_icedid_njrat_ryuk
- Size 691KB
- SHA256 df51a2f2bdf102871d53caf83546cd6fa987532065d8ded095c5e152b5f0ff82
- MD5 2bf3fbc4c3fe0b60d5bae64b5c0e2b58
- SHA1 18bc66d294d60edb9e493c990ec2372e7b9e3236
- SHA512 8c6fa66ea35a82db364b938b963b92ff8fc5ac918364a8ee9ba02f28d847c3e449a5ce2b718f583c3d3b0af60198841b41ab88508db734da391dc653ab1e2114
- SSDEEP 6144:7NGhPk3F9HYVQNs98iSz2uahLLLneB4uvWe6s109xJTtP7/F30Ggi5V23:7NGh3QNs98bzYDLuvWeTW9MGt5E3
- TLSH T1CBE4D451BBA449B1F0B299748975965C9B327C55C923CE0F2091AEDEFFF39808D24B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.