General
- Target 2026-08-04_bc0c25cfe3f5ee7e40d971140f06688b_icedid_ryuk
- Size 1.5MB
- Sample260804-gcefcawzfz
- SHA256 193970f7d553af619adead133e782f7a69941dabcd2898684914e7ffea3a94ce
- MD5 bc0c25cfe3f5ee7e40d971140f06688b
- SHA1 b42038111739168997e29b38995c0ad4a67c576f
- SHA512 78dd5e2fa82abc4602901d05f581bde419f9dfb9251af93cd5545fd9b57c11b22558b1fd1df682c4b0d189b8ce3f10e1ca5bb1c1ddc287afbbe76ee2c858caa1
- SSDEEP 24576:g5t2sbnDmb57GBiOl6a8JTth/RWZvR6wQQ92pN3M:g5t2seb5+Pl6bJTIZ5jdgpi
- TLSH T1AD75F076629513D4E362573488B1FA20BB35FD235A239B6F73E47D5B3D322819C21B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_bc0c25cfe3f5ee7e40d971140f06688b_icedid_ryuk.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_bc0c25cfe3f5ee7e40d971140f06688b_icedid_ryuk
- Size 1.5MB
- SHA256 193970f7d553af619adead133e782f7a69941dabcd2898684914e7ffea3a94ce
- MD5 bc0c25cfe3f5ee7e40d971140f06688b
- SHA1 b42038111739168997e29b38995c0ad4a67c576f
- SHA512 78dd5e2fa82abc4602901d05f581bde419f9dfb9251af93cd5545fd9b57c11b22558b1fd1df682c4b0d189b8ce3f10e1ca5bb1c1ddc287afbbe76ee2c858caa1
- SSDEEP 24576:g5t2sbnDmb57GBiOl6a8JTth/RWZvR6wQQ92pN3M:g5t2seb5+Pl6bJTIZ5jdgpi
- TLSH T1AD75F076629513D4E362573488B1FA20BB35FD235A239B6F73E47D5B3D322819C21B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1