General
- Target 2026-07-27_15dcf5e80ba40a2433e2ce4beb6dd077_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260727-y355es1xes
- SHA256 11b0a41b0079eb8c535f034216351fcc3e539bb27b1f4606fb0ae9e078495858
- MD5 15dcf5e80ba40a2433e2ce4beb6dd077
- SHA1 9c8fab360752f94aff5ba4dda57f6fc02a033435
- SHA512 9997471719e9c0eedbb4e9e951565a8b850cbdeba6771c08998f4f2929a43b13f33a397dd254fcc25416e4f7a10be6872cc8f1fcb69e880c1d06560e24d1268c
- SSDEEP 49152:YX4zOF+YPR+Ds3XAL8Njmbb/hedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyg:/q4H3/hed+UsiC96UEK
- TLSH T12E266C03F2E941D8F0AAE2789B365732EE72BC568B3465DF025036151E76EE05B3C762
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-07-27_15dcf5e80ba40a2433e2ce4beb6dd077_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 11b0a41b0079eb8c535f034216351fcc3e539bb27b1f4606fb0ae9e078495858
- MD5 15dcf5e80ba40a2433e2ce4beb6dd077
- SHA1 9c8fab360752f94aff5ba4dda57f6fc02a033435
- SHA512 9997471719e9c0eedbb4e9e951565a8b850cbdeba6771c08998f4f2929a43b13f33a397dd254fcc25416e4f7a10be6872cc8f1fcb69e880c1d06560e24d1268c
- SSDEEP 49152:YX4zOF+YPR+Ds3XAL8Njmbb/hedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyg:/q4H3/hed+UsiC96UEK
- TLSH T12E266C03F2E941D8F0AAE2789B365732EE72BC568B3465DF025036151E76EE05B3C762
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1