General
- Target 2026-07-27_b4b0f2f7cf2f2c4897402e0fba541f37_icedid_njrat_ryuk
- Size 691KB
- Sample260727-rm5emafq9v
- SHA256 09be033ade399af6469fc19a0cf3cf4899d3de3cb04354498e16bd0a5b002517
- MD5 b4b0f2f7cf2f2c4897402e0fba541f37
- SHA1 c09d733cf349e516431996bf4af1c96bf92e9bb6
- SHA512 1687ffe34b833ab969e3409f353744cbe739750f0d776e17777c807f06a82d90b6b892fd074ed6b975179891e09c80eb9958863d953789068dc7e979dfc1a68e
- SSDEEP 6144:VNBgLXS9WQSCGs9WxSzSSl/LLMVXIA0nEvss09xJTtP7/F30nrPHXnKXFs:VNBgtCGs9WkzdPhA0nE0n9MnrPHXnKVs
- TLSH T1F2E4E511ABA449B1F0B299348975966C9B327C55CD23CE0F20959EDEFFF39808D25B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_b4b0f2f7cf2f2c4897402e0fba541f37_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_b4b0f2f7cf2f2c4897402e0fba541f37_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_b4b0f2f7cf2f2c4897402e0fba541f37_icedid_njrat_ryuk
- Size 691KB
- SHA256 09be033ade399af6469fc19a0cf3cf4899d3de3cb04354498e16bd0a5b002517
- MD5 b4b0f2f7cf2f2c4897402e0fba541f37
- SHA1 c09d733cf349e516431996bf4af1c96bf92e9bb6
- SHA512 1687ffe34b833ab969e3409f353744cbe739750f0d776e17777c807f06a82d90b6b892fd074ed6b975179891e09c80eb9958863d953789068dc7e979dfc1a68e
- SSDEEP 6144:VNBgLXS9WQSCGs9WxSzSSl/LLMVXIA0nEvss09xJTtP7/F30nrPHXnKXFs:VNBgtCGs9WkzdPhA0nE0n9MnrPHXnKVs
- TLSH T1F2E4E511ABA449B1F0B299348975966C9B327C55CD23CE0F20959EDEFFF39808D25B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.