General
- Target 2026-08-02_e8136737750153149f9af26a184fa20a_icedid_mespinoza_njrat_ryuk
- Size 14.0MB
- Sample260802-qqdkmsbj31
- SHA256 8a695ade82ad6e860561952dee9d007732facf12eed79fb0fdda293fb75a627e
- MD5 e8136737750153149f9af26a184fa20a
- SHA1 9a6f0a1aee6b44a7d686e44fd09a7c07af16e648
- SHA512 2f7dfc326004da9464d3b59d7c3d06414b8cc1defe0637b81481080b00febe1c7035ec22eb6d9d2f118db4e0dd74b8c2bb50cfe8d544868cdaf449a018b5800b
- SSDEEP 98304:jxW2sUhKyJAM01FAZJaAcQgpyI3D527BWG:jx3rhbo+aZjprVQBWG
- TLSH T160E6A2364178CAA9C1526837C5494CF693ADBC10C6B352B7D6443D37FABE1C2CA7E286
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_e8136737750153149f9af26a184fa20a_icedid_mespinoza_njrat_ryuk.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_e8136737750153149f9af26a184fa20a_icedid_mespinoza_njrat_ryuk
- Size 14.0MB
- SHA256 8a695ade82ad6e860561952dee9d007732facf12eed79fb0fdda293fb75a627e
- MD5 e8136737750153149f9af26a184fa20a
- SHA1 9a6f0a1aee6b44a7d686e44fd09a7c07af16e648
- SHA512 2f7dfc326004da9464d3b59d7c3d06414b8cc1defe0637b81481080b00febe1c7035ec22eb6d9d2f118db4e0dd74b8c2bb50cfe8d544868cdaf449a018b5800b
- SSDEEP 98304:jxW2sUhKyJAM01FAZJaAcQgpyI3D527BWG:jx3rhbo+aZjprVQBWG
- TLSH T160E6A2364178CAA9C1526837C5494CF693ADBC10C6B352B7D6443D37FABE1C2CA7E286
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory