General
- Target 2026-07-31_7a57b370b906092c9db4488b3eec7e8a_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260731-3pht7aaq7s
- SHA256 c7e7a216870f613b4631a4ba0b72c82c899d5b120ef62b3e97ee399516f53fee
- MD5 7a57b370b906092c9db4488b3eec7e8a
- SHA1 971b00771cdb03d3d73b0fbb9bf6f3dc77c77aae
- SHA512 3635a4b596c09739af34ef51604d37ac64c38bee535ba1054fa0304947d61f43e77edaf62b15895250a18c4176bc881af1994ee4a1581391412e45f395559d97
- SSDEEP 49152:c2jFWIYZ0v5lvGpd3XAL8Njmbb/Eedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40Nb:LhH3/Eed+UsiC96v
- TLSH T168266C03F2E941D8F0AEE2789B765732EE72BC568B30A5DF025036151E76EE05B38761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-07-31_7a57b370b906092c9db4488b3eec7e8a_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 c7e7a216870f613b4631a4ba0b72c82c899d5b120ef62b3e97ee399516f53fee
- MD5 7a57b370b906092c9db4488b3eec7e8a
- SHA1 971b00771cdb03d3d73b0fbb9bf6f3dc77c77aae
- SHA512 3635a4b596c09739af34ef51604d37ac64c38bee535ba1054fa0304947d61f43e77edaf62b15895250a18c4176bc881af1994ee4a1581391412e45f395559d97
- SSDEEP 49152:c2jFWIYZ0v5lvGpd3XAL8Njmbb/Eedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40Nb:LhH3/Eed+UsiC96v
- TLSH T168266C03F2E941D8F0AEE2789B765732EE72BC568B30A5DF025036151E76EE05B38761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1