General
- Target 2026-07-27_b1a5e5b7596bbbe8d55ca2413065fb12_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260728-af1dnavvhv
- SHA256 229bb403f9939a03be566e3e129f68122dcc0428f6d1902c35c3170dc5300d6f
- MD5 b1a5e5b7596bbbe8d55ca2413065fb12
- SHA1 b0bb5db6f074b9287e2e8c6f537bc536bd3ab29a
- SHA512 0de009c543f8bc6a9e10aaabb697ed8d93a5b9e568f7e46495911ed0cec347ce2a3acb05875cca68f09744f429de47e6085afd9e64ee7fe68fa86d87f7711a8b
- SSDEEP 49152:mKYNdg7E2Y2kWtB3XAL8Njmbb/Redc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsL:b8H3/Red+UsiC9682KxN
- TLSH T149266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-07-27_b1a5e5b7596bbbe8d55ca2413065fb12_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 229bb403f9939a03be566e3e129f68122dcc0428f6d1902c35c3170dc5300d6f
- MD5 b1a5e5b7596bbbe8d55ca2413065fb12
- SHA1 b0bb5db6f074b9287e2e8c6f537bc536bd3ab29a
- SHA512 0de009c543f8bc6a9e10aaabb697ed8d93a5b9e568f7e46495911ed0cec347ce2a3acb05875cca68f09744f429de47e6085afd9e64ee7fe68fa86d87f7711a8b
- SSDEEP 49152:mKYNdg7E2Y2kWtB3XAL8Njmbb/Redc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsL:b8H3/Red+UsiC9682KxN
- TLSH T149266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1