General
- Target 2026-09-08_47a483f0a1424757d660a971d33b2a15_icedid_njrat_ryuk
- Size 1.5MB
- Sample260910-grthtayhpa
- SHA256 1eb0f35bed87ae2576fc3d79e6721eab4d1d6ae2f9ef5da42f1e03d7a485d2ca
- MD5 47a483f0a1424757d660a971d33b2a15
- SHA1 92ea962c88a7b32557b478abcc26d02421073ec2
- SHA512 e7cd5fd2adba5e54bdc334f68604b3b6fa107f84c4f7b058f54c5e68fd7b3fd93ef01bd12b40f56b02fa4f289a6b4b856b9ae868095ca4ca821f468c28575436
- SSDEEP 12288:I5O7YV6EI+hxfN6V7xjGDjWpbRYOypsu8xdaOv4GVvGr0ZJFXxogpG7:J7YV69yxknw4FYnshx8OfVe247
- TLSH T177750259B39460F0E176923A89A12556F37674321730D38F4368537E6F739A0DE3EB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_47a483f0a1424757d660a971d33b2a15_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_47a483f0a1424757d660a971d33b2a15_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_47a483f0a1424757d660a971d33b2a15_icedid_njrat_ryuk
- Size 1.5MB
- SHA256 1eb0f35bed87ae2576fc3d79e6721eab4d1d6ae2f9ef5da42f1e03d7a485d2ca
- MD5 47a483f0a1424757d660a971d33b2a15
- SHA1 92ea962c88a7b32557b478abcc26d02421073ec2
- SHA512 e7cd5fd2adba5e54bdc334f68604b3b6fa107f84c4f7b058f54c5e68fd7b3fd93ef01bd12b40f56b02fa4f289a6b4b856b9ae868095ca4ca821f468c28575436
- SSDEEP 12288:I5O7YV6EI+hxfN6V7xjGDjWpbRYOypsu8xdaOv4GVvGr0ZJFXxogpG7:J7YV69yxknw4FYnshx8OfVe247
- TLSH T177750259B39460F0E176923A89A12556F37674321730D38F4368537E6F739A0DE3EB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1