General
- Target 2026-09-09_fcafa74ff365e8e937bb8cf68452939a_icedid_mespinoza_njrat_ryuk
- Size 1.5MB
- Sample260909-kr39ssthlb
- SHA256 9463a32daafb306cddbb18c51fe0130f17c3ad997ea3254084fc85202ecc6618
- MD5 fcafa74ff365e8e937bb8cf68452939a
- SHA1 fab59da18c55ff4feaf2efd7418678fa7ec91737
- SHA512 072f6320ccaaffc84797203d71d6176458cd6cae44edb73c6718b95ceb3ffa5127790d6d353c4e7db4048c427284fd3b8e471b9c5d92b2d3500b0df95ade12df
- SSDEEP 24576:6xFJJ4SFfxy4FJ5L0jy+8/9IRKM9essqjnhMgeiCl7G0nehbGZpbD:6xFJhfxuGRPYDmg27RnWGj
- TLSH T193655C1BEBF500E5F57AC13699A26129FCB238D54B38A7CB97804A0F5B31BE49D39701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_fcafa74ff365e8e937bb8cf68452939a_icedid_mespinoza_njrat_ryuk.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_fcafa74ff365e8e937bb8cf68452939a_icedid_mespinoza_njrat_ryuk.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_fcafa74ff365e8e937bb8cf68452939a_icedid_mespinoza_njrat_ryuk
- Size 1.5MB
- SHA256 9463a32daafb306cddbb18c51fe0130f17c3ad997ea3254084fc85202ecc6618
- MD5 fcafa74ff365e8e937bb8cf68452939a
- SHA1 fab59da18c55ff4feaf2efd7418678fa7ec91737
- SHA512 072f6320ccaaffc84797203d71d6176458cd6cae44edb73c6718b95ceb3ffa5127790d6d353c4e7db4048c427284fd3b8e471b9c5d92b2d3500b0df95ade12df
- SSDEEP 24576:6xFJJ4SFfxy4FJ5L0jy+8/9IRKM9essqjnhMgeiCl7G0nehbGZpbD:6xFJhfxuGRPYDmg27RnWGj
- TLSH T193655C1BEBF500E5F57AC13699A26129FCB238D54B38A7CB97804A0F5B31BE49D39701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory