General
- Target 2026-07-29_5768d26864d6ced435d55938e92e18bb_icedid_njrat_ryuk
- Size 691KB
- Sample260729-m5keysep3y
- SHA256 d691ab151998ee0546a9c1c35a3fad89f6c37c5c72ecd16ecb9f77313212b72d
- MD5 5768d26864d6ced435d55938e92e18bb
- SHA1 22507f01f491ab95439d93148cc3e555cb266caa
- SHA512 d5ec2ab5f673944385da1be70510e93467aa3e80b20c4eeeb44ae979db7297ad4843786cac21fb64eeff3617ca38786bd3f69f38ab6fff46a3df47c6922100e8
- SSDEEP 6144:EN5ct7I9pVoYes9qyDKzvR0+LLO7bK1K9r3s309xJTtP7/F30y34/shR:EN5cRYes9qHza+X1K9rck9My31R
- TLSH T111E4D455ABA409B1F0B299744A75961C9B727C55CD23CE0F2094AEDEFFF39808D24B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_5768d26864d6ced435d55938e92e18bb_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_5768d26864d6ced435d55938e92e18bb_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_5768d26864d6ced435d55938e92e18bb_icedid_njrat_ryuk
- Size 691KB
- SHA256 d691ab151998ee0546a9c1c35a3fad89f6c37c5c72ecd16ecb9f77313212b72d
- MD5 5768d26864d6ced435d55938e92e18bb
- SHA1 22507f01f491ab95439d93148cc3e555cb266caa
- SHA512 d5ec2ab5f673944385da1be70510e93467aa3e80b20c4eeeb44ae979db7297ad4843786cac21fb64eeff3617ca38786bd3f69f38ab6fff46a3df47c6922100e8
- SSDEEP 6144:EN5ct7I9pVoYes9qyDKzvR0+LLO7bK1K9r3s309xJTtP7/F30y34/shR:EN5cRYes9qHza+X1K9rck9My31R
- TLSH T111E4D455ABA409B1F0B299744A75961C9B727C55CD23CE0F2094AEDEFFF39808D24B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.