General
- Target 2026-08-06_ef9b1392bd3f0f052c4e987f36b66829_icedid_njrat_ryuk
- Size 964KB
- Sample260806-bessvsvzav
- SHA256 007c9f221f46db7cc0d10effa9a9594c6fa81b4ab7a32901adf584e087daddef
- MD5 ef9b1392bd3f0f052c4e987f36b66829
- SHA1 37a0e698525fe22ef87baa2ab4b01ace9429b840
- SHA512 c530850a9fe592f7b3e5662f11fb681fe08a5194c8d216f2842e340470aaa471633b98b62b787eb6144395cc1937bcc1390d0c5e86218ad1e3804d7167cbbcc7
- SSDEEP 24576:FXdRzVakfCrljcvWK0KZiV9jNHmCg5GZL24Y1PeJn:FtRzVakfCrl426YjNHI5G524CPeJn
- TLSH T1D725F115EBA050F6D577C13C88A28527E6B2786D0730EBDF43988B195F672E14E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_ef9b1392bd3f0f052c4e987f36b66829_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_ef9b1392bd3f0f052c4e987f36b66829_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_ef9b1392bd3f0f052c4e987f36b66829_icedid_njrat_ryuk
- Size 964KB
- SHA256 007c9f221f46db7cc0d10effa9a9594c6fa81b4ab7a32901adf584e087daddef
- MD5 ef9b1392bd3f0f052c4e987f36b66829
- SHA1 37a0e698525fe22ef87baa2ab4b01ace9429b840
- SHA512 c530850a9fe592f7b3e5662f11fb681fe08a5194c8d216f2842e340470aaa471633b98b62b787eb6144395cc1937bcc1390d0c5e86218ad1e3804d7167cbbcc7
- SSDEEP 24576:FXdRzVakfCrljcvWK0KZiV9jNHmCg5GZL24Y1PeJn:FtRzVakfCrl426YjNHI5G524CPeJn
- TLSH T1D725F115EBA050F6D577C13C88A28527E6B2786D0730EBDF43988B195F672E14E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1