General
- Target 2026-09-08_93ed1cb05bb963c7857fedf491763cc1_icedid_njrat_ryuk
- Size 2.3MB
- Sample260908-rseq6ascna
- SHA256 f26c81550bf80252c2de9ee2214111dceb39aeab589e7fb3967ea57de70b8bc8
- MD5 93ed1cb05bb963c7857fedf491763cc1
- SHA1 6f35f36351bb70dafe5a211fa85b7e9a4057b0ac
- SHA512 991eb0765e93333fd2b80ca94b0184d73aa62b4770404f92d2ef86cb1ec18046e3cdbb6781073a2ae1ea9570079efe9957ba4ca484931e3ff773e4ccc31c694e
- SSDEEP 49152:c8krRUDwl/rpC3qi1kjsVc2ot4+Ej2EsjKQKnAX1tIc5foj3:t66kjsVc2ot4+Ej2EBQ0Okc5g
- TLSH T1C2B5AE24FA488295C17AC27DCA9A4B4BE7B1F40847349ADF509506DE2E737E44D3FAE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_93ed1cb05bb963c7857fedf491763cc1_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_93ed1cb05bb963c7857fedf491763cc1_icedid_njrat_ryuk
- Size 2.3MB
- SHA256 f26c81550bf80252c2de9ee2214111dceb39aeab589e7fb3967ea57de70b8bc8
- MD5 93ed1cb05bb963c7857fedf491763cc1
- SHA1 6f35f36351bb70dafe5a211fa85b7e9a4057b0ac
- SHA512 991eb0765e93333fd2b80ca94b0184d73aa62b4770404f92d2ef86cb1ec18046e3cdbb6781073a2ae1ea9570079efe9957ba4ca484931e3ff773e4ccc31c694e
- SSDEEP 49152:c8krRUDwl/rpC3qi1kjsVc2ot4+Ej2EsjKQKnAX1tIc5foj3:t66kjsVc2ot4+Ej2EBQ0Okc5g
- TLSH T1C2B5AE24FA488295C17AC27DCA9A4B4BE7B1F40847349ADF509506DE2E737E44D3FAE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory