Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
04/08/2026, 11:34
General
- Target 2026-08-03_68428beb32a62466cd68492d9f12eb1e_hijackloader_icedid_njrat_ryuk.exe
- Size 1.8MB
- Sample260804-npdsxaad39
- SHA256 17116010ea44a12c7f9cb89760932a993cd4f1f361330f8f9ff0d5a833b0c93a
Score
6/10
Malware Config
Signatures
- Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in Program Files directory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_68428beb32a62466cd68492d9f12eb1e_hijackloader_icedid_njrat_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-03_68428beb32a62466cd68492d9f12eb1e_hijackloader_icedid_njrat_ryuk.exe"1⤵
- Enumerates connected drives
- Drops file in Program Files directory
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4040-1-0x000001D313320000-0x000001D313325000-memory.dmp
memory/4040-0-0x000001D311CE0000-0x000001D311CE7000-memory.dmp
memory/4040-3-0x000001D313320000-0x000001D313325000-memory.dmp
memory/4040-4-0x000001D313320000-0x000001D313325000-memory.dmp
memory/4040-5-0x000001D313320000-0x000001D313325000-memory.dmp
memory/4040-6-0x000001D313320000-0x000001D313325000-memory.dmp