General
- Target 2026-08-02_92e35cdfb723d67c4b5856519a779de9_icedid_mespinoza_njrat_ryuk
- Size 1.1MB
- Sample260802-j7fm1aff27
- SHA256 f678355be73ff654acda2fe3926fb94ab0a620dfb717d2642a68c30ca08395e0
- MD5 92e35cdfb723d67c4b5856519a779de9
- SHA1 9a7c05ca0e145c76703fd3b5806294802c66f18f
- SHA512 79716778ae3ae6b3c71eed6fcbb10e11907de3f01474b99d641e69be6e5ed17fc339529f91d52f49029be9865b2ab5ef42603781a9ca51d519bd2e8864b23585
- SSDEEP 24576:K5phzGIvN8KFeWROc/Px13mD4/wzXyuWk9c/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:yhzXDeWROc/513mDzryugLNiXicJFFRI
- TLSH T1DD45E046A7E401B8E0B3D534CA664656F7B338555A30CB5F13A99A9B2F337608F39332
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_92e35cdfb723d67c4b5856519a779de9_icedid_mespinoza_njrat_ryuk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_92e35cdfb723d67c4b5856519a779de9_icedid_mespinoza_njrat_ryuk
- Size 1.1MB
- SHA256 f678355be73ff654acda2fe3926fb94ab0a620dfb717d2642a68c30ca08395e0
- MD5 92e35cdfb723d67c4b5856519a779de9
- SHA1 9a7c05ca0e145c76703fd3b5806294802c66f18f
- SHA512 79716778ae3ae6b3c71eed6fcbb10e11907de3f01474b99d641e69be6e5ed17fc339529f91d52f49029be9865b2ab5ef42603781a9ca51d519bd2e8864b23585
- SSDEEP 24576:K5phzGIvN8KFeWROc/Px13mD4/wzXyuWk9c/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:yhzXDeWROc/513mDzryugLNiXicJFFRI
- TLSH T1DD45E046A7E401B8E0B3D534CA664656F7B338555A30CB5F13A99A9B2F337608F39332
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1