General
- Target 2026-09-12_358a5a8122c29913bec7c2970170451c_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260913-d9m7zaef63
- SHA256 7affcd77d3bbea1a0ce0ccf23dda0b839815d68889e5e7ec2d61e4cb5f6e29f0
- MD5 358a5a8122c29913bec7c2970170451c
- SHA1 5377feddcf00e3bdbc0802b3c636b5cb5fb18c7d
- SHA512 e90f2e9e5a04dc06dd85601d3b522f3c81235d44e5bd04039212d04730169bb51c63aca127875910b6301806f60b123f1cf82bc26c30941ac1a9fc4f937063b0
- SSDEEP 49152:Oq5oq7TPq5M/L3XAL8Njmbb/Oedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyQ:9KH3/Oed+UsiC96ggi
- TLSH T1B5266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-09-12_358a5a8122c29913bec7c2970170451c_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 7affcd77d3bbea1a0ce0ccf23dda0b839815d68889e5e7ec2d61e4cb5f6e29f0
- MD5 358a5a8122c29913bec7c2970170451c
- SHA1 5377feddcf00e3bdbc0802b3c636b5cb5fb18c7d
- SHA512 e90f2e9e5a04dc06dd85601d3b522f3c81235d44e5bd04039212d04730169bb51c63aca127875910b6301806f60b123f1cf82bc26c30941ac1a9fc4f937063b0
- SSDEEP 49152:Oq5oq7TPq5M/L3XAL8Njmbb/Oedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHyQ:9KH3/Oed+UsiC96ggi
- TLSH T1B5266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1