General
- Target 2026-08-05_9f2133ec42693d5d29f2507a791ad529_icedid_mespinoza_njrat_ryuk
- Size 1012KB
- Sample260805-s193pscb69
- SHA256 12f38ef51323d3d2dfa934c163ce78c6196436498ec817988f0225da97e27eec
- MD5 9f2133ec42693d5d29f2507a791ad529
- SHA1 529befa4d413877cc703efa6de20ea1b14f4389f
- SHA512 de3cf72614a6000fd3322d9b19e5f3d737a9ef16a70827b11b73e8afc878114207c25661e69f83ba55f4eb4d7e0ac695ff9816cd88d94397ccffda7dda7c8e80
- SSDEEP 24576:lIg/X248lf/Do6nWl1R3u43F+MK5mqxMdRg97tn:7X18lf/Do6WlvH3cM2mqxMen
- TLSH T1A225D05AFB6448F5D1668138C552860BE3B27C581771D7CF12A8A3AE2F335D09E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_9f2133ec42693d5d29f2507a791ad529_icedid_mespinoza_njrat_ryuk.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_9f2133ec42693d5d29f2507a791ad529_icedid_mespinoza_njrat_ryuk.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_9f2133ec42693d5d29f2507a791ad529_icedid_mespinoza_njrat_ryuk
- Size 1012KB
- SHA256 12f38ef51323d3d2dfa934c163ce78c6196436498ec817988f0225da97e27eec
- MD5 9f2133ec42693d5d29f2507a791ad529
- SHA1 529befa4d413877cc703efa6de20ea1b14f4389f
- SHA512 de3cf72614a6000fd3322d9b19e5f3d737a9ef16a70827b11b73e8afc878114207c25661e69f83ba55f4eb4d7e0ac695ff9816cd88d94397ccffda7dda7c8e80
- SSDEEP 24576:lIg/X248lf/Do6nWl1R3u43F+MK5mqxMdRg97tn:7X18lf/Do6WlvH3cM2mqxMen
- TLSH T1A225D05AFB6448F5D1668138C552860BE3B27C581771D7CF12A8A3AE2F335D09E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.