General
- Target 2026-07-27_11f8813e1fc99f415f6173f4269cfca8_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260728-aschcsgp9w
- SHA256 e5c39791355c1c41d61fc77880fd57e46025e9a3d7b476b974de61648ed772f0
- MD5 11f8813e1fc99f415f6173f4269cfca8
- SHA1 00806b7c5e64cd93cc255adbfab12943edafb96a
- SHA512 782c84fbc5f7cb2612d4eb0eb3785c473b8ba600d3e489e589e0629d871c20423e3e71ad998fe407e9a32085a2d0567a3737130882fd68693c9fcfda4db3c1d1
- SSDEEP 49152:6t2atuAWhwGp3XAL8Njmbb/4edc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyWn:G9H3/4ed+UsiC96k
- TLSH T1E8266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-07-27_11f8813e1fc99f415f6173f4269cfca8_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 e5c39791355c1c41d61fc77880fd57e46025e9a3d7b476b974de61648ed772f0
- MD5 11f8813e1fc99f415f6173f4269cfca8
- SHA1 00806b7c5e64cd93cc255adbfab12943edafb96a
- SHA512 782c84fbc5f7cb2612d4eb0eb3785c473b8ba600d3e489e589e0629d871c20423e3e71ad998fe407e9a32085a2d0567a3737130882fd68693c9fcfda4db3c1d1
- SSDEEP 49152:6t2atuAWhwGp3XAL8Njmbb/4edc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyWn:G9H3/4ed+UsiC96k
- TLSH T1E8266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1