General
- Target 2026-08-03_12a59177051734e3c60af4011ee7f7f8_icedid_njrat_ryuk
- Size 691KB
- Sample260803-ph2rtsaq31
- SHA256 a3132f48fc752988035e35a38da878ad7a12743e8ebcd70fda4c866fc73905a6
- MD5 12a59177051734e3c60af4011ee7f7f8
- SHA1 9e2e1f7a3fb82fd186b93efb6af4d8cd9bfbda46
- SHA512 d8bd59cb371236a209df01d64705047d0c6b89c1a866d84fff8ac63c1210e121cc6807b255fe3f8ed006437ae29816f434075465a4969a767c4ce5a53332c1a3
- SSDEEP 6144:8NuanMg9XZBcJs9u+MHz9cme/LLK95q+1JWyss09xJTtP7/F30BnWE:8NuaXcJs9hMzJO/+1JWrn9MN9
- TLSH T155E4C311ABA449B1F0B299748975865C9B727C55CD23CE0F2095AEDEFFF39808D24B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_12a59177051734e3c60af4011ee7f7f8_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_12a59177051734e3c60af4011ee7f7f8_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_12a59177051734e3c60af4011ee7f7f8_icedid_njrat_ryuk
- Size 691KB
- SHA256 a3132f48fc752988035e35a38da878ad7a12743e8ebcd70fda4c866fc73905a6
- MD5 12a59177051734e3c60af4011ee7f7f8
- SHA1 9e2e1f7a3fb82fd186b93efb6af4d8cd9bfbda46
- SHA512 d8bd59cb371236a209df01d64705047d0c6b89c1a866d84fff8ac63c1210e121cc6807b255fe3f8ed006437ae29816f434075465a4969a767c4ce5a53332c1a3
- SSDEEP 6144:8NuanMg9XZBcJs9u+MHz9cme/LLK95q+1JWyss09xJTtP7/F30BnWE:8NuaXcJs9hMzJO/+1JWrn9MN9
- TLSH T155E4C311ABA449B1F0B299748975865C9B727C55CD23CE0F2095AEDEFFF39808D24B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.