General
- Target 2026-08-08_2557c2f2f45900a143ac4b5ed69bc14f_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260808-r4axcasyez
- SHA256 af039d69f791f2d631e2d760dc42b3195dd0f75bd7c96aa6c15462591c3ea4ad
- MD5 2557c2f2f45900a143ac4b5ed69bc14f
- SHA1 1d630bb7b9a69400249e27d27a0629984a877887
- SHA512 58b80e9625581a1dc63ba3228f06bf4c497763baa17c3b3ad9f4a38c12fb31fc5fd0c7b8eb9a64453a59e13b5555fa09ba3b8e54b862c0c9aeb994240e455bbe
- SSDEEP 49152:mDCe3P7jbJgTF3XAL8Njmbb/hedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyh:I1H3/hed+UsiC96tW8
- TLSH T14B266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-08-08_2557c2f2f45900a143ac4b5ed69bc14f_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 af039d69f791f2d631e2d760dc42b3195dd0f75bd7c96aa6c15462591c3ea4ad
- MD5 2557c2f2f45900a143ac4b5ed69bc14f
- SHA1 1d630bb7b9a69400249e27d27a0629984a877887
- SHA512 58b80e9625581a1dc63ba3228f06bf4c497763baa17c3b3ad9f4a38c12fb31fc5fd0c7b8eb9a64453a59e13b5555fa09ba3b8e54b862c0c9aeb994240e455bbe
- SSDEEP 49152:mDCe3P7jbJgTF3XAL8Njmbb/hedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyh:I1H3/hed+UsiC96tW8
- TLSH T14B266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1