General
- Target 2026-09-10_4bfd8608965098ebbf3289055a76f4f4_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260910-vqq8ysem5v
- SHA256 ce441df9b5da686bdcd3013a837b77c6bb397a3d44dce15981427a1395ae2cf7
- MD5 4bfd8608965098ebbf3289055a76f4f4
- SHA1 08b022fa3dc116092fae699b29116f21a8d3b4f3
- SHA512 c4f8d89433d79cb38090b5972828c6c04cb1f0ea028ac9edf1d969fd33027a042c7aea8ff1c70964bed32d2002ed47a72428c90abbd8df9b643da84431f0a5df
- SSDEEP 49152:M569YED7N1RO/3XAL8Njmbb/5edc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyf:MYH3/5ed+UsiC96ln
- TLSH T1BD266B03F2E941D8F0AEE2789B765732EE72BC568B30A5DF025036151E76EE05B38761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-09-10_4bfd8608965098ebbf3289055a76f4f4_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 ce441df9b5da686bdcd3013a837b77c6bb397a3d44dce15981427a1395ae2cf7
- MD5 4bfd8608965098ebbf3289055a76f4f4
- SHA1 08b022fa3dc116092fae699b29116f21a8d3b4f3
- SHA512 c4f8d89433d79cb38090b5972828c6c04cb1f0ea028ac9edf1d969fd33027a042c7aea8ff1c70964bed32d2002ed47a72428c90abbd8df9b643da84431f0a5df
- SSDEEP 49152:M569YED7N1RO/3XAL8Njmbb/5edc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyf:MYH3/5ed+UsiC96ln
- TLSH T1BD266B03F2E941D8F0AEE2789B765732EE72BC568B30A5DF025036151E76EE05B38761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1