General
- Target 2026-07-30_070b8a3bb9cb1aadb8914bae0940081e_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260730-q7wsjsyhpc
- SHA256 9e60acdb4f267d1cb50feb78cd97820e0fe28c9381453c253712da71590eaefd
- MD5 070b8a3bb9cb1aadb8914bae0940081e
- SHA1 c10d7533bb2353b7392a6dba3f2cfde701ec7b8e
- SHA512 41e08170d4dbf3d5c8a978dec9f54197804f8f754d6b647b017870c558f57b6cfa29a94a4dd1595dfebdf4355505c3bf78a377c773e503f38ff73fc63d0f7e78
- SSDEEP 49152:/JItsloiH5Kkk3XAL8Njmbb/Fedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyk:pjH3/Fed+UsiC96fq
- TLSH T1FE266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-07-30_070b8a3bb9cb1aadb8914bae0940081e_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 9e60acdb4f267d1cb50feb78cd97820e0fe28c9381453c253712da71590eaefd
- MD5 070b8a3bb9cb1aadb8914bae0940081e
- SHA1 c10d7533bb2353b7392a6dba3f2cfde701ec7b8e
- SHA512 41e08170d4dbf3d5c8a978dec9f54197804f8f754d6b647b017870c558f57b6cfa29a94a4dd1595dfebdf4355505c3bf78a377c773e503f38ff73fc63d0f7e78
- SSDEEP 49152:/JItsloiH5Kkk3XAL8Njmbb/Fedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyk:pjH3/Fed+UsiC96fq
- TLSH T1FE266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1