General
- Target 2026-08-12_bd5e3395af97a6e8c3442a2250f2998e_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260812-rkpldsyerg
- SHA256 e0be6b1b760983d5fca623bca2d12fadc79a49420660c042107c1fd4ded39d20
- MD5 bd5e3395af97a6e8c3442a2250f2998e
- SHA1 3720f93b6958b0e4e76f42119ef953ce0ed6009b
- SHA512 0b762e1b2529e994fbd6be784d59a2bf3225c78977b7441ec6838ec2cf2f423b3cfb6744a79a0a815cf20ff5763392cc47603bd19018b003c58bf4f9d2282e30
- SSDEEP 49152:DTa7+U7lodPNJ3XAL8Njmbb/Vedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyH:IhH3/Ved+UsiC96Zjz
- TLSH T155266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-08-12_bd5e3395af97a6e8c3442a2250f2998e_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 e0be6b1b760983d5fca623bca2d12fadc79a49420660c042107c1fd4ded39d20
- MD5 bd5e3395af97a6e8c3442a2250f2998e
- SHA1 3720f93b6958b0e4e76f42119ef953ce0ed6009b
- SHA512 0b762e1b2529e994fbd6be784d59a2bf3225c78977b7441ec6838ec2cf2f423b3cfb6744a79a0a815cf20ff5763392cc47603bd19018b003c58bf4f9d2282e30
- SSDEEP 49152:DTa7+U7lodPNJ3XAL8Njmbb/Vedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyH:IhH3/Ved+UsiC96Zjz
- TLSH T155266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1