General
- Target 2026-09-10_38eb8e1eb74bef8fcbb45e52dbf3e24f_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260910-wne9catcrc
- SHA256 84b3faf54494ce6fb43e7d820b3c99fe78ad8007538d3c903c13353b37376f20
- MD5 38eb8e1eb74bef8fcbb45e52dbf3e24f
- SHA1 08533d32c6a10998b102a15bb0034a708ca12340
- SHA512 f4f8507a7dde0da82453c4e5a7d4f95b7bc15b3bffe22a6d750778eef84df6b0cfbc21582685835695315a72ee1e59c394c9187e6ba4ca5e3024ade147f84f54
- SSDEEP 49152:xAEPmaFaua8HnCWB3XAL8Njmbb/Iedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40Nx:DifH3/Ied+UsiC96Vr
- TLSH T127266C03F2E941D8F0AAE2789B765732EE72BC568B3065DF025036152E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-09-10_38eb8e1eb74bef8fcbb45e52dbf3e24f_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 84b3faf54494ce6fb43e7d820b3c99fe78ad8007538d3c903c13353b37376f20
- MD5 38eb8e1eb74bef8fcbb45e52dbf3e24f
- SHA1 08533d32c6a10998b102a15bb0034a708ca12340
- SHA512 f4f8507a7dde0da82453c4e5a7d4f95b7bc15b3bffe22a6d750778eef84df6b0cfbc21582685835695315a72ee1e59c394c9187e6ba4ca5e3024ade147f84f54
- SSDEEP 49152:xAEPmaFaua8HnCWB3XAL8Njmbb/Iedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40Nx:DifH3/Ied+UsiC96Vr
- TLSH T127266C03F2E941D8F0AAE2789B765732EE72BC568B3065DF025036152E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1