General
- Target 2026-08-06_e15027f5eafaf1e9c409cf25eef63db4_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260806-xvszfsstet
- SHA256 25ae741d5071e76b2bea5a72631b11eb68764e05c2f79078f5020f1ea2656195
- MD5 e15027f5eafaf1e9c409cf25eef63db4
- SHA1 6209bba95d21463f001262ccc08087de911de793
- SHA512 55eb568712321b4460a64f65db48effae82e136a95b7bdab9955e10048d49b8e6f9f836b5cd95c1ecbfc3c0d098894a83eb7734ffe9491d69362c508319e45c1
- SSDEEP 49152:LW/ZpLM5tlItuC3XAL8Njmbb//edc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHB:asfH3//ed+UsiC96hhGz
- TLSH T17C266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-08-06_e15027f5eafaf1e9c409cf25eef63db4_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 25ae741d5071e76b2bea5a72631b11eb68764e05c2f79078f5020f1ea2656195
- MD5 e15027f5eafaf1e9c409cf25eef63db4
- SHA1 6209bba95d21463f001262ccc08087de911de793
- SHA512 55eb568712321b4460a64f65db48effae82e136a95b7bdab9955e10048d49b8e6f9f836b5cd95c1ecbfc3c0d098894a83eb7734ffe9491d69362c508319e45c1
- SSDEEP 49152:LW/ZpLM5tlItuC3XAL8Njmbb//edc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHB:asfH3//ed+UsiC96hhGz
- TLSH T17C266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1