947dbaf6cdf8bce8000f3a7a1e8c4a7fb9e775a2e7c7426f2c6130e49761c99b | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-08-04...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-04_8e8991ed71a59433de40f24263cf81a6_icedid_njrat_ryuk
Size 3.2MB
Sample260804-g32cssxyfx
SHA256 947dbaf6cdf8bce8000f3a7a1e8c4a7fb9e775a2e7c7426f2c6130e49761c99b
MD5 8e8991ed71a59433de40f24263cf81a6
SHA1 ef413dacc9cc611bc5e193c3a8dfb4e953736254
SHA512 e28e0a0090212d38c00fec38aed1a75e9b8ebccd0580959731901ca56e8403a45c787b70040404662c61ab9a283c93568f94d0b807c50bcb06c638be9de1237a
SSDEEP 49152:0ROwnZuS95gEFfFoTJ0YLjFcC55LcIaRBZ7b5+Pl6bJTIZ5jdgp2:7wnxRAq8ctBBslgJTIZ5Bgp
TLSH
T10FF54A23B196D0D4C01DD074CF165BB2A6A07C69CBE5A3DF06D87E217B35AD07ABA318
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery ransomware spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-08-04_8e8991ed71a59433de40f24263cf81a6_icedid_njrat_ryuk.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

15 signatures

150 seconds

discovery ransomware spyware stealer

Malware Config

Targets

- Target
  2026-08-04_8e8991ed71a59433de40f24263cf81a6_icedid_njrat_ryuk
- Size 3.2MB
- SHA256 947dbaf6cdf8bce8000f3a7a1e8c4a7fb9e775a2e7c7426f2c6130e49761c99b
- MD5 8e8991ed71a59433de40f24263cf81a6
- SHA1 ef413dacc9cc611bc5e193c3a8dfb4e953736254
- SHA512 e28e0a0090212d38c00fec38aed1a75e9b8ebccd0580959731901ca56e8403a45c787b70040404662c61ab9a283c93568f94d0b807c50bcb06c638be9de1237a
- SSDEEP 49152:0ROwnZuS95gEFfFoTJ0YLjFcC55LcIaRBZ7b5+Pl6bJTIZ5jdgp2:7wnxRAq8ctBBslgJTIZ5Bgp
- TLSH
  T10FF54A23B196D0D4C01DD074CF165BB2A6A07C69CBE5A3DF06D87E217B35AD07ABA318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery ransomware spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomwarespywarestealer

© 2018-2026

Terms | Privacy