General
- Target 2026-07-30_e3b1e276a19eee2d61fb699ab61a4708_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260730-xrb7jaeb77
- SHA256 492e7e41904842d7b7bb150bf4b21cb158e92d2c42a4e5a1f95d2125f4d06fa9
- MD5 e3b1e276a19eee2d61fb699ab61a4708
- SHA1 2812a475541119e3d7307fcfa13233d25cbdcbd6
- SHA512 3dfc3fd3bc5994bdd2b69ba95f01e003718be3eba5c7d6f52f0d5bb5308350a4e2f041c4f739aa586d3da5c723f7e68a596ba98b5c0bb96c6b846ff15d262d42
- SSDEEP 49152:gUZ5s6tDc2HN3XAL8Njmbb/Nedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyWk:zGH3/Ned+UsiC96GM1T
- TLSH T162266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-07-30_e3b1e276a19eee2d61fb699ab61a4708_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 492e7e41904842d7b7bb150bf4b21cb158e92d2c42a4e5a1f95d2125f4d06fa9
- MD5 e3b1e276a19eee2d61fb699ab61a4708
- SHA1 2812a475541119e3d7307fcfa13233d25cbdcbd6
- SHA512 3dfc3fd3bc5994bdd2b69ba95f01e003718be3eba5c7d6f52f0d5bb5308350a4e2f041c4f739aa586d3da5c723f7e68a596ba98b5c0bb96c6b846ff15d262d42
- SSDEEP 49152:gUZ5s6tDc2HN3XAL8Njmbb/Nedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyWk:zGH3/Ned+UsiC96GM1T
- TLSH T162266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1