General
- Target 2026-08-08_e119f2d199e0ba8847e0ed2a33cef629_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260808-rfce9sdg88
- SHA256 acc9d6bbd3237abe8f80d7c758f329addcb1df11b60b40aa60db510757b64ae1
- MD5 e119f2d199e0ba8847e0ed2a33cef629
- SHA1 6b63f4cd715a5981e52ee3824aa7e11df499f6ca
- SHA512 9d000daeb8cb8b49a9ef800df56ad8153432df6577d0beda4518c7f7f6df1701457d03d3d3e0f7cee2548efac94970e03740b45a7fb6877d586a96ec5c67b6bc
- SSDEEP 49152:MfAbn045qqxA3XAL8Njmbb/1cedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHy7:NfH3/1ced+UsiC96Z
- TLSH T16C266C03F2E941D8F0AAE2789B765732EE72BC568B3065DF025036152E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-08-08_e119f2d199e0ba8847e0ed2a33cef629_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 acc9d6bbd3237abe8f80d7c758f329addcb1df11b60b40aa60db510757b64ae1
- MD5 e119f2d199e0ba8847e0ed2a33cef629
- SHA1 6b63f4cd715a5981e52ee3824aa7e11df499f6ca
- SHA512 9d000daeb8cb8b49a9ef800df56ad8153432df6577d0beda4518c7f7f6df1701457d03d3d3e0f7cee2548efac94970e03740b45a7fb6877d586a96ec5c67b6bc
- SSDEEP 49152:MfAbn045qqxA3XAL8Njmbb/1cedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHy7:NfH3/1ced+UsiC96Z
- TLSH T16C266C03F2E941D8F0AAE2789B765732EE72BC568B3065DF025036152E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1