General
- Target 2026-08-05_12d8783d1a94602fd246f513ffd2c784_icedid_njrat_ryuk
- Size 691KB
- Sample260805-cmvsvstwhw
- SHA256 e0714fbde8fa5d39bb9e1b036f218c2b94692825eeec7d39d7a97c6a5e2db5ca
- MD5 12d8783d1a94602fd246f513ffd2c784
- SHA1 050214a9bec8cc28ab970df831f5a846e1115e05
- SHA512 462ff2a16a06cb615d756d88022e01cf4cefc6479da7d7b3520d513d5f8c69fd93979cd6e79dc7ff9ca4da56e91d69baa8c83b11ebce644355a53f6df6f768c6
- SSDEEP 6144:aNN/Yes9b+tB2s98RxzOEL7LL3rEgSNLQ6s609xJTtP7/F30uDTUgAXTp5E+:aNN/JB2s98PzRTFSNLQTR9M8nAXTp5P
- TLSH T1ACE4D551ABA449B1F0B299748975865CAB727C55CD23CE0F20949EDEFFF39808D24B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_12d8783d1a94602fd246f513ffd2c784_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_12d8783d1a94602fd246f513ffd2c784_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_12d8783d1a94602fd246f513ffd2c784_icedid_njrat_ryuk
- Size 691KB
- SHA256 e0714fbde8fa5d39bb9e1b036f218c2b94692825eeec7d39d7a97c6a5e2db5ca
- MD5 12d8783d1a94602fd246f513ffd2c784
- SHA1 050214a9bec8cc28ab970df831f5a846e1115e05
- SHA512 462ff2a16a06cb615d756d88022e01cf4cefc6479da7d7b3520d513d5f8c69fd93979cd6e79dc7ff9ca4da56e91d69baa8c83b11ebce644355a53f6df6f768c6
- SSDEEP 6144:aNN/Yes9b+tB2s98RxzOEL7LL3rEgSNLQ6s609xJTtP7/F30uDTUgAXTp5E+:aNN/JB2s98PzRTFSNLQTR9M8nAXTp5P
- TLSH T1ACE4D551ABA449B1F0B299748975865CAB727C55CD23CE0F20949EDEFFF39808D24B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.