7a4ab935e6691af9b85bd22a065be2a92d6a342e941ea51ebfcd162f8fc196f5 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-08-06...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-06_219330b5ab406517e034a7ac567c333b_icedid_njrat_ryuk
Size 7.0MB
Sample260807-bdql4sdc76
SHA256 7a4ab935e6691af9b85bd22a065be2a92d6a342e941ea51ebfcd162f8fc196f5
MD5 219330b5ab406517e034a7ac567c333b
SHA1 ff9ad62f56271b71587fc660488504dceac45bca
SHA512 1c8abda46826efa994443b25414864aa06e510fc264d1354c990ec5b8fbfd82d7c7cabd14e590961e866b4d0ee239bace4c5a75cf76b6321f1532ab00434fdc6
SSDEEP 98304:7fKGjCavm+W3hLFyjktyQy1YvvSpE0Lm:jKGjCaeLgOraE0L
TLSH
T1BC765A66A2B6C0A8D05AC873FA29D521D7253C4E53F492EB13D475E416F2AC63F38F90
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery ransomware spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-08-06_219330b5ab406517e034a7ac567c333b_icedid_njrat_ryuk.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

15 signatures

150 seconds

discovery ransomware spyware stealer

Malware Config

Targets

- Target
  2026-08-06_219330b5ab406517e034a7ac567c333b_icedid_njrat_ryuk
- Size 7.0MB
- SHA256 7a4ab935e6691af9b85bd22a065be2a92d6a342e941ea51ebfcd162f8fc196f5
- MD5 219330b5ab406517e034a7ac567c333b
- SHA1 ff9ad62f56271b71587fc660488504dceac45bca
- SHA512 1c8abda46826efa994443b25414864aa06e510fc264d1354c990ec5b8fbfd82d7c7cabd14e590961e866b4d0ee239bace4c5a75cf76b6321f1532ab00434fdc6
- SSDEEP 98304:7fKGjCavm+W3hLFyjktyQy1YvvSpE0Lm:jKGjCaeLgOraE0L
- TLSH
  T1BC765A66A2B6C0A8D05AC873FA29D521D7253C4E53F492EB13D475E416F2AC63F38F90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery ransomware spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomwarespywarestealer

© 2018-2026

Terms | Privacy