General
- Target 2026-09-11_5dc4098ed9d4518f93c0d794ae74f698_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260912-lt13wshb99
- SHA256 c2f0f7e6d123f42b6d828a71c289d089b374c3ebe1cfa4477fd007d117ec81a8
- MD5 5dc4098ed9d4518f93c0d794ae74f698
- SHA1 3fcc3ef272e9b997870f8319aeb51801b0ff104a
- SHA512 477b5061f46bdfdab2d8c79103da39e9b300a110dce86943896f1b63ebf99bdfa32211903f282be925b4edf17bb927f2020c6cd3b187f3ef664f869f3f0e8132
- SSDEEP 49152:v3KZsERgMQcm3XAL8Njmbb/vedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyWd:qLH3/ved+UsiC96VI
- TLSH T19C266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-09-11_5dc4098ed9d4518f93c0d794ae74f698_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 c2f0f7e6d123f42b6d828a71c289d089b374c3ebe1cfa4477fd007d117ec81a8
- MD5 5dc4098ed9d4518f93c0d794ae74f698
- SHA1 3fcc3ef272e9b997870f8319aeb51801b0ff104a
- SHA512 477b5061f46bdfdab2d8c79103da39e9b300a110dce86943896f1b63ebf99bdfa32211903f282be925b4edf17bb927f2020c6cd3b187f3ef664f869f3f0e8132
- SSDEEP 49152:v3KZsERgMQcm3XAL8Njmbb/vedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyWd:qLH3/ved+UsiC96VI
- TLSH T19C266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1