General
- Target 2026-08-05_f4e0c36fd6ce05c927ef1f0e21e9c8f0_icedid_njrat_ryuk
- Size 691KB
- Sample260805-ln791sthra
- SHA256 30c4712df4fe9e635b222d21de9f0ae037431cd0ab8422c5297218dc5ed8e398
- MD5 f4e0c36fd6ce05c927ef1f0e21e9c8f0
- SHA1 52971acabb71b2213acfe99244933b112e7d7804
- SHA512 c334b75de6fa98a7150cb40deef7ab31e9db6664a5b9301a67f912386366b0113bd7ecc8b18348685e21d97be681aab583a9e8b7402f28bfdbc758f925bf8977
- SSDEEP 6144:ryNXZvfA9T1n0Ns9JyfzLOlJLLmX1B91urAsM09xJTtP7/F30Oqhv0EAk:ryNXZC0Ns9J2zmhW91ur1H9MZcEj
- TLSH T11FE4D541ABA409B1F0B299344975962C9B727C55DD23CE0F2095AEDEFFF3A408D25B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_f4e0c36fd6ce05c927ef1f0e21e9c8f0_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_f4e0c36fd6ce05c927ef1f0e21e9c8f0_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_f4e0c36fd6ce05c927ef1f0e21e9c8f0_icedid_njrat_ryuk
- Size 691KB
- SHA256 30c4712df4fe9e635b222d21de9f0ae037431cd0ab8422c5297218dc5ed8e398
- MD5 f4e0c36fd6ce05c927ef1f0e21e9c8f0
- SHA1 52971acabb71b2213acfe99244933b112e7d7804
- SHA512 c334b75de6fa98a7150cb40deef7ab31e9db6664a5b9301a67f912386366b0113bd7ecc8b18348685e21d97be681aab583a9e8b7402f28bfdbc758f925bf8977
- SSDEEP 6144:ryNXZvfA9T1n0Ns9JyfzLOlJLLmX1B91urAsM09xJTtP7/F30Oqhv0EAk:ryNXZC0Ns9J2zmhW91ur1H9MZcEj
- TLSH T11FE4D541ABA409B1F0B299344975962C9B727C55DD23CE0F2095AEDEFFF3A408D25B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.