General
- Target 2026-07-27_5bbc198e7e0e34135ce252c9ece9ce69_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260728-amfylagm2v
- SHA256 9f63ccf15eb259f5024b98970f646999b54c92df1daa753a7119caace3371337
- MD5 5bbc198e7e0e34135ce252c9ece9ce69
- SHA1 4a9c6f6e20a1277d2d453fc854918544983de1b3
- SHA512 da2451103bd06947e46de9afa8ce2b5125fa05faebb487ea2fff55c62bb6d2a15e845ea649e22af8865bbe6e8fcb4310f76ec3a6c939f2c8051b4c00321775c5
- SSDEEP 49152:neF6dXtnWOrgH6y3XAL8Njmbb/sedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40Ns8:4e9H3/sed+UsiC966+
- TLSH T179266C03F2E941D8F0AAE2789B765732EE72BC568B3065DF025036151E76EE05B3C762
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-07-27_5bbc198e7e0e34135ce252c9ece9ce69_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 9f63ccf15eb259f5024b98970f646999b54c92df1daa753a7119caace3371337
- MD5 5bbc198e7e0e34135ce252c9ece9ce69
- SHA1 4a9c6f6e20a1277d2d453fc854918544983de1b3
- SHA512 da2451103bd06947e46de9afa8ce2b5125fa05faebb487ea2fff55c62bb6d2a15e845ea649e22af8865bbe6e8fcb4310f76ec3a6c939f2c8051b4c00321775c5
- SSDEEP 49152:neF6dXtnWOrgH6y3XAL8Njmbb/sedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40Ns8:4e9H3/sed+UsiC966+
- TLSH T179266C03F2E941D8F0AAE2789B765732EE72BC568B3065DF025036151E76EE05B3C762
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1