General
- Target 2026-08-05_3ccab7c0259a7f3da1adb7a8b0e366a7_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260805-dpmqpsvsdv
- SHA256 425919b7b2c4441d4754be778b8eb4e7483d9bbc97eb5bdece1cb7194ef075d7
- MD5 3ccab7c0259a7f3da1adb7a8b0e366a7
- SHA1 00204b0efcdb8ef876cae344ca31453a70000738
- SHA512 437a0576bb8069515b335434bae61df59c54ec66e8ed95468b85ac3ee5c077b988f83b8c719b87385d8949bfbded198fc2ba3e5b194a3068ccd23ec48af00247
- SSDEEP 49152:pX8ivez7y+9OyN3XAL8Njmbb/6edc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHD:aN6H3/6ed+UsiC96j6
- TLSH T1ED266C03F2E941D8F0AAE2789B765732EE72BC568B3065DF025036151E76EE05B3C762
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-08-05_3ccab7c0259a7f3da1adb7a8b0e366a7_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 425919b7b2c4441d4754be778b8eb4e7483d9bbc97eb5bdece1cb7194ef075d7
- MD5 3ccab7c0259a7f3da1adb7a8b0e366a7
- SHA1 00204b0efcdb8ef876cae344ca31453a70000738
- SHA512 437a0576bb8069515b335434bae61df59c54ec66e8ed95468b85ac3ee5c077b988f83b8c719b87385d8949bfbded198fc2ba3e5b194a3068ccd23ec48af00247
- SSDEEP 49152:pX8ivez7y+9OyN3XAL8Njmbb/6edc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHD:aN6H3/6ed+UsiC96j6
- TLSH T1ED266C03F2E941D8F0AAE2789B765732EE72BC568B3065DF025036151E76EE05B3C762
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1