General
- Target 2026-09-04_9fada09c93f1cfaa7620c4a1c7c3b5b7_icedid_njrat_ryuk
- Size 960KB
- Sample260905-carknsvckg
- SHA256 515e36d155ff1cb1b0c96e72366cfffc1d8dd05db73350d4cdc715c992522ff8
- MD5 9fada09c93f1cfaa7620c4a1c7c3b5b7
- SHA1 22b72905cff9f5bff3a536b759e118ecce4560e5
- SHA512 9e83a332d8f267374d8775c6083139b5fc94f7175162bc66db2c7ba3943ee15af98b846d9df8053498ece5058df333bead1ba64f0e803bba6ad43e173d2aed64
- SSDEEP 24576:7fIRzVakfCrljcujuBSHsu2UhowloNLQWozSk:7ARzVakfCrlZJsu2UCSoN0vzSk
- TLSH T16B250256F7A411FAD977C13C89A15523E272B49D0724E7DF03A88A0A1F236E15E3FB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_9fada09c93f1cfaa7620c4a1c7c3b5b7_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_9fada09c93f1cfaa7620c4a1c7c3b5b7_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_9fada09c93f1cfaa7620c4a1c7c3b5b7_icedid_njrat_ryuk
- Size 960KB
- SHA256 515e36d155ff1cb1b0c96e72366cfffc1d8dd05db73350d4cdc715c992522ff8
- MD5 9fada09c93f1cfaa7620c4a1c7c3b5b7
- SHA1 22b72905cff9f5bff3a536b759e118ecce4560e5
- SHA512 9e83a332d8f267374d8775c6083139b5fc94f7175162bc66db2c7ba3943ee15af98b846d9df8053498ece5058df333bead1ba64f0e803bba6ad43e173d2aed64
- SSDEEP 24576:7fIRzVakfCrljcujuBSHsu2UhowloNLQWozSk:7ARzVakfCrlZJsu2UCSoN0vzSk
- TLSH T16B250256F7A411FAD977C13C89A15523E272B49D0724E7DF03A88A0A1F236E15E3FB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1