General
- Target 2026-08-21_89d6ce80aa13dd23956b503ea403639b_icedid_njrat_ryuk
- Size 997KB
- Sample260822-m6cfqsxze1
- SHA256 d8edf351aee74a0c905628c2e140554559d785838ea224a26fe01bbade0f0d08
- MD5 89d6ce80aa13dd23956b503ea403639b
- SHA1 4e9ee047b61d2709bd641c32b1610994a63b6abe
- SHA512 4230463d6cca0e55890501984f7fd70745d421fa467fe2b0feb25625650b2bf5d9e1b7241e4f0c22c1116bd77d357341b0203b49f4d5e9ad708876904d8e4d82
- SSDEEP 24576:eFadb7bTgXQtkImAhMlI59HQOyWEtEgTL58wo3:NZ7XgXQt97yluHmtEgTlzo3
- TLSH T17625F156F75009BAD03BD178C9218A51EAB37C591B20A74F13F827AA2F33360693FB15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_89d6ce80aa13dd23956b503ea403639b_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_89d6ce80aa13dd23956b503ea403639b_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_89d6ce80aa13dd23956b503ea403639b_icedid_njrat_ryuk
- Size 997KB
- SHA256 d8edf351aee74a0c905628c2e140554559d785838ea224a26fe01bbade0f0d08
- MD5 89d6ce80aa13dd23956b503ea403639b
- SHA1 4e9ee047b61d2709bd641c32b1610994a63b6abe
- SHA512 4230463d6cca0e55890501984f7fd70745d421fa467fe2b0feb25625650b2bf5d9e1b7241e4f0c22c1116bd77d357341b0203b49f4d5e9ad708876904d8e4d82
- SSDEEP 24576:eFadb7bTgXQtkImAhMlI59HQOyWEtEgTL58wo3:NZ7XgXQt97yluHmtEgTlzo3
- TLSH T17625F156F75009BAD03BD178C9218A51EAB37C591B20A74F13F827AA2F33360693FB15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1