General
- Target 2026-08-06_f959cb1c9c2cc0c5d6d8ae75f3da8f16_icedid_njrat_ryuk
- Size 963KB
- Sample260806-bc8raszfqe
- SHA256 a5e173c2627b7d5d4b1d62fbb40397a2e0e70c247c371ace5270316aaba0c4d6
- MD5 f959cb1c9c2cc0c5d6d8ae75f3da8f16
- SHA1 7a7e2058d6806825b45e10ddfd7a7b911ed70bf8
- SHA512 977bd339330cc2ab3937f6fc2adcffd7e51d7e0d3f2bad525c80e8b3640341795ceaab31d23e90dd8bfc38fd978c238caaf5f6e6993515758f8315f0af5887c4
- SSDEEP 24576:j3LgUTd62WKRonkhywtUD9MNP0SeIN5J:j3LgUtsnkhywyKNP0wN5
- TLSH T15C250154E7A500F9E96BD13CC8669A13D3B2749D0724E6DF03A84BA91F237E54E3EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_f959cb1c9c2cc0c5d6d8ae75f3da8f16_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_f959cb1c9c2cc0c5d6d8ae75f3da8f16_icedid_njrat_ryuk
- Size 963KB
- SHA256 a5e173c2627b7d5d4b1d62fbb40397a2e0e70c247c371ace5270316aaba0c4d6
- MD5 f959cb1c9c2cc0c5d6d8ae75f3da8f16
- SHA1 7a7e2058d6806825b45e10ddfd7a7b911ed70bf8
- SHA512 977bd339330cc2ab3937f6fc2adcffd7e51d7e0d3f2bad525c80e8b3640341795ceaab31d23e90dd8bfc38fd978c238caaf5f6e6993515758f8315f0af5887c4
- SSDEEP 24576:j3LgUTd62WKRonkhywtUD9MNP0SeIN5J:j3LgUtsnkhywyKNP0wN5
- TLSH T15C250154E7A500F9E96BD13CC8669A13D3B2749D0724E6DF03A84BA91F237E54E3EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1