General
- Target 2026-07-29_aea8cd62595b0573b57ecc99023a41e7_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260729-fxnzvaec25
- SHA256 2831cff8aea59fbc06fb75d58f48e7089cf90921c07070d975819fb3d378f508
- MD5 aea8cd62595b0573b57ecc99023a41e7
- SHA1 0454009aa0505b5bb449340ed073a2ff6b20fffc
- SHA512 bb03cc634bf29d11126fd187990a7cde6eb73000b0987c10cfc7421f8b3a7a824ba5655506b1f6f54b3afe751ead818aeb8a670e05c286d9987be9278a5296ac
- SSDEEP 49152:5YpRebQqwect3XAL8Njmbb/9edc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyWS:CiH3/9ed+UsiC96sS
- TLSH T1C9266C03F2E941D8F0AAE2789B765732EE72BC568B3065DF025036152E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-07-29_aea8cd62595b0573b57ecc99023a41e7_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 2831cff8aea59fbc06fb75d58f48e7089cf90921c07070d975819fb3d378f508
- MD5 aea8cd62595b0573b57ecc99023a41e7
- SHA1 0454009aa0505b5bb449340ed073a2ff6b20fffc
- SHA512 bb03cc634bf29d11126fd187990a7cde6eb73000b0987c10cfc7421f8b3a7a824ba5655506b1f6f54b3afe751ead818aeb8a670e05c286d9987be9278a5296ac
- SSDEEP 49152:5YpRebQqwect3XAL8Njmbb/9edc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyWS:CiH3/9ed+UsiC96sS
- TLSH T1C9266C03F2E941D8F0AAE2789B765732EE72BC568B3065DF025036152E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1