General
- Target 2026-08-09_5a7e99b03647ebabd8aa5c26636a880b_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260809-1n6hraweje
- SHA256 e03d7b5952bd304a7a197faa51b9966e14e2de343c43e2d3322bad6930fa5896
- MD5 5a7e99b03647ebabd8aa5c26636a880b
- SHA1 42562378c70d0cdea1f213f4e7b3f4cc56d0d043
- SHA512 54f0ca9b12f18122d563fc810750b0bf67228669bae6f49d9d33e96ac23cb68b918f1d6428cd95da8aa18f01712f078e389d97e0c93e40706c471336bb0e713f
- SSDEEP 49152:fG+pPAqrB33ulQ3XAL8Njmbb/vedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHo:TAjH3/ved+UsiC969
- TLSH T138266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-08-09_5a7e99b03647ebabd8aa5c26636a880b_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 e03d7b5952bd304a7a197faa51b9966e14e2de343c43e2d3322bad6930fa5896
- MD5 5a7e99b03647ebabd8aa5c26636a880b
- SHA1 42562378c70d0cdea1f213f4e7b3f4cc56d0d043
- SHA512 54f0ca9b12f18122d563fc810750b0bf67228669bae6f49d9d33e96ac23cb68b918f1d6428cd95da8aa18f01712f078e389d97e0c93e40706c471336bb0e713f
- SSDEEP 49152:fG+pPAqrB33ulQ3XAL8Njmbb/vedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHo:TAjH3/ved+UsiC969
- TLSH T138266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1