General
- Target 2026-08-20_b896f77833e5229da4cca99610ea7227_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260820-paandada97
- SHA256 aea5d1f9c56cceb98bb98ace66ddab6fc205ea9504284d67868042d9bef698a1
- MD5 b896f77833e5229da4cca99610ea7227
- SHA1 b0ed11ec7b429738173a50cfe7342aa4f6fdaa50
- SHA512 d25ead2e11ecae9f29b0b6a8dbe04574c1ebf753124a55ac9894dfed9a360c8a161e5932c12c19b9089632face20a9424e2921c38c7e0f8ea8870161c399567e
- SSDEEP 49152:3zYpyQk3ea70t3XAL8Njmbb/Nedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyI:ZhH3/Ned+UsiC96KR
- TLSH T15B266C03F2E941D8F0AAE2789B765732EE72BC568B3065DF025036151E76EE05B3C762
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-08-20_b896f77833e5229da4cca99610ea7227_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 aea5d1f9c56cceb98bb98ace66ddab6fc205ea9504284d67868042d9bef698a1
- MD5 b896f77833e5229da4cca99610ea7227
- SHA1 b0ed11ec7b429738173a50cfe7342aa4f6fdaa50
- SHA512 d25ead2e11ecae9f29b0b6a8dbe04574c1ebf753124a55ac9894dfed9a360c8a161e5932c12c19b9089632face20a9424e2921c38c7e0f8ea8870161c399567e
- SSDEEP 49152:3zYpyQk3ea70t3XAL8Njmbb/Nedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyI:ZhH3/Ned+UsiC96KR
- TLSH T15B266C03F2E941D8F0AAE2789B765732EE72BC568B3065DF025036151E76EE05B3C762
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1