General
- Target 2026-08-14_88979a7733e045a0333bddb2b923b0f0_icedid_mespinoza_njrat_ryuk
- Size 942KB
- Sample260814-l23axsha35
- SHA256 caa29780f0ab9a884a5d1862daa0a4e8a793a5e0b00a22cb84607b5d25414be5
- MD5 88979a7733e045a0333bddb2b923b0f0
- SHA1 2e13dd5587fd42b796f3fc1e722e1068b6eb6aed
- SHA512 9405c7412c86049097de3dde94754e07084fa4660d7ea6efb1b5ab7c266d7757d64847a638f20ee2dea26b9a3951794ab60cd9b6ce0b075d5cfa69630c4cbc13
- SSDEEP 24576:doePzWRWcf2OUPGCiFX1NyBo4kx929bL3Hnx:dbzWRWcf4GC1B+kn3Hnx
- TLSH T11B25E105E7E500B8F1B7AA34CDB64506DA737C895A70CB5F23AD866A2F737608D34722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_88979a7733e045a0333bddb2b923b0f0_icedid_mespinoza_njrat_ryuk.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_88979a7733e045a0333bddb2b923b0f0_icedid_mespinoza_njrat_ryuk.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_88979a7733e045a0333bddb2b923b0f0_icedid_mespinoza_njrat_ryuk
- Size 942KB
- SHA256 caa29780f0ab9a884a5d1862daa0a4e8a793a5e0b00a22cb84607b5d25414be5
- MD5 88979a7733e045a0333bddb2b923b0f0
- SHA1 2e13dd5587fd42b796f3fc1e722e1068b6eb6aed
- SHA512 9405c7412c86049097de3dde94754e07084fa4660d7ea6efb1b5ab7c266d7757d64847a638f20ee2dea26b9a3951794ab60cd9b6ce0b075d5cfa69630c4cbc13
- SSDEEP 24576:doePzWRWcf2OUPGCiFX1NyBo4kx929bL3Hnx:dbzWRWcf4GC1B+kn3Hnx
- TLSH T11B25E105E7E500B8F1B7AA34CDB64506DA737C895A70CB5F23AD866A2F737608D34722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory