General
- Target 2026-08-04_55dc44a075641b99f0056077f626554b_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260804-h3jcnaterd
- SHA256 623b050b5138d3c3da9b43ff8bf9d6581a768659dc36bd55a82b241adf2ddfb2
- MD5 55dc44a075641b99f0056077f626554b
- SHA1 38e67eafbf0fa795aedc83dca7ff14068328f39d
- SHA512 91bd8138db68929f83a20c89d7ef6997287bfa5ee499dffb5a3a6614aad8b529b147b0ef0bf0230d64404b55f65d26bc4d5ac73b0b957db325e09c8d8db2da81
- SSDEEP 49152:L6Y8SVaz2G08H3XAL8Njmbb/1edc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyL:1tH3/1ed+UsiC96PVj
- TLSH T11A266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-08-04_55dc44a075641b99f0056077f626554b_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 623b050b5138d3c3da9b43ff8bf9d6581a768659dc36bd55a82b241adf2ddfb2
- MD5 55dc44a075641b99f0056077f626554b
- SHA1 38e67eafbf0fa795aedc83dca7ff14068328f39d
- SHA512 91bd8138db68929f83a20c89d7ef6997287bfa5ee499dffb5a3a6614aad8b529b147b0ef0bf0230d64404b55f65d26bc4d5ac73b0b957db325e09c8d8db2da81
- SSDEEP 49152:L6Y8SVaz2G08H3XAL8Njmbb/1edc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyL:1tH3/1ed+UsiC96PVj
- TLSH T11A266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1