General
- Target 2026-08-12_3d1eab6b88cb74318591a9a841d1cd1c_icedid_mespinoza_njrat_ryuk
- Size 14.0MB
- Sample260813-br273ahl41
- SHA256 6e29fccfbb28b89e2e1d42108d6d686bd4b47650874e0bcefd0f90184f01e4bd
- MD5 3d1eab6b88cb74318591a9a841d1cd1c
- SHA1 c4a329fe0720fda554ce7a65c76286bfed917a7f
- SHA512 b89750a048f2d6c814bd8f6edeb233b829bb8f3525e866d7891436157b1f8b831593e70e505c2ac3f708b641349e6af9842b2a93ec3e789d3a5a9184272be3e6
- SSDEEP 98304:EcMNByXmBjQ3/K8ncF6VfpPNAR9UPbIMd5A:NM763RpFpw05
- TLSH T1A2E6B3364178CAA9C1526837C4494CF693ADBC10C6B311B7D6443D37FABE5C6CABE286
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_3d1eab6b88cb74318591a9a841d1cd1c_icedid_mespinoza_njrat_ryuk.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_3d1eab6b88cb74318591a9a841d1cd1c_icedid_mespinoza_njrat_ryuk
- Size 14.0MB
- SHA256 6e29fccfbb28b89e2e1d42108d6d686bd4b47650874e0bcefd0f90184f01e4bd
- MD5 3d1eab6b88cb74318591a9a841d1cd1c
- SHA1 c4a329fe0720fda554ce7a65c76286bfed917a7f
- SHA512 b89750a048f2d6c814bd8f6edeb233b829bb8f3525e866d7891436157b1f8b831593e70e505c2ac3f708b641349e6af9842b2a93ec3e789d3a5a9184272be3e6
- SSDEEP 98304:EcMNByXmBjQ3/K8ncF6VfpPNAR9UPbIMd5A:NM763RpFpw05
- TLSH T1A2E6B3364178CAA9C1526837C4494CF693ADBC10C6B311B7D6443D37FABE5C6CABE286
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory