General
- Target 2026-08-01_e86906edbd854362109d55821bcd8677_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260801-3hmjssad86
- SHA256 d14c92ddd6cc0b4806320370d6cd000d0984939cb5901040ffd30c46bfaf7ec3
- MD5 e86906edbd854362109d55821bcd8677
- SHA1 7a861ddf907dcd9ae185e5336adaf81dc9143306
- SHA512 a35a242f814153fa8fb35eec2246d429e8eff73e59714adf2f3b17110877f365d5dce462d1c7743680bcbaa91cf977eb09722694c1fdb626528fd0d5a100bb95
- SSDEEP 49152:11FcXA/CiRXG/3XAL8Njmbb/pedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHy+:0EH3/ped+UsiC96sTF1
- TLSH T13F266C03F2E941D8F0AEE2789B365732EE72BC568B3465DF025036152E76EE05B38761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-08-01_e86906edbd854362109d55821bcd8677_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 d14c92ddd6cc0b4806320370d6cd000d0984939cb5901040ffd30c46bfaf7ec3
- MD5 e86906edbd854362109d55821bcd8677
- SHA1 7a861ddf907dcd9ae185e5336adaf81dc9143306
- SHA512 a35a242f814153fa8fb35eec2246d429e8eff73e59714adf2f3b17110877f365d5dce462d1c7743680bcbaa91cf977eb09722694c1fdb626528fd0d5a100bb95
- SSDEEP 49152:11FcXA/CiRXG/3XAL8Njmbb/pedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHy+:0EH3/ped+UsiC96sTF1
- TLSH T13F266C03F2E941D8F0AEE2789B365732EE72BC568B3465DF025036152E76EE05B38761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1