General
- Target 2026-08-08_5470e277d086c512db6a06984d6d7a15_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260808-hbaanssamh
- SHA256 8e95c6f2305c1a63a9ee33e373117dac359d35b2406652778aced27c1e011c24
- MD5 5470e277d086c512db6a06984d6d7a15
- SHA1 153690f4b2a30a3112f31541d43860211f39a833
- SHA512 de155996033a769ea6f758aee088a06b07c9086f6ab296259328c330735c67db3ec7fb17531d99ef5a7c054bcdb446052d202e3900ebaffb0d6e335f6968c055
- SSDEEP 49152:oBDXkUrU79wuMZwpK3XAL8Njmbb/jedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40j:mpqxvbH3/jed+UsiC96VD
- TLSH T14A266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-08-08_5470e277d086c512db6a06984d6d7a15_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 8e95c6f2305c1a63a9ee33e373117dac359d35b2406652778aced27c1e011c24
- MD5 5470e277d086c512db6a06984d6d7a15
- SHA1 153690f4b2a30a3112f31541d43860211f39a833
- SHA512 de155996033a769ea6f758aee088a06b07c9086f6ab296259328c330735c67db3ec7fb17531d99ef5a7c054bcdb446052d202e3900ebaffb0d6e335f6968c055
- SSDEEP 49152:oBDXkUrU79wuMZwpK3XAL8Njmbb/jedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40j:mpqxvbH3/jed+UsiC96VD
- TLSH T14A266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1