General
- Target 2026-09-27_458deffd325d02fa6c3dc83632ab68d4_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- Sample260928-hay8eaxt3k
- SHA256 2ab4de91d827b419048ef9952cf29feaf17c02ba6eb00ff618b354043322b3a2
- MD5 458deffd325d02fa6c3dc83632ab68d4
- SHA1 20f674a8336df0a043a271e27adfcd02fd94365b
- SHA512 fbea7724327ea7ccfbb271ef705d5ce37d7ba873c1c1d3a825b0a683134241b431e143b86fea76e06c81ed096bbb63ebf60809c5cdb52fa0ef4a1f1df18a2e54
- SSDEEP 49152:fUIgyTYmiWN5sW3XAL8Njmbb/Zedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHi:j6H3/Zed+UsiC96Lzye
- TLSH T174266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-09-27_458deffd325d02fa6c3dc83632ab68d4_hijackloader_icedid_njrat_ryuk
- Size 4.3MB
- SHA256 2ab4de91d827b419048ef9952cf29feaf17c02ba6eb00ff618b354043322b3a2
- MD5 458deffd325d02fa6c3dc83632ab68d4
- SHA1 20f674a8336df0a043a271e27adfcd02fd94365b
- SHA512 fbea7724327ea7ccfbb271ef705d5ce37d7ba873c1c1d3a825b0a683134241b431e143b86fea76e06c81ed096bbb63ebf60809c5cdb52fa0ef4a1f1df18a2e54
- SSDEEP 49152:fUIgyTYmiWN5sW3XAL8Njmbb/Zedc+KokvY0n/sHQ4VD//IOSArTpYDOJj40NsHi:j6H3/Zed+UsiC96Lzye
- TLSH T174266C03F2E941D8F0AAE2789B765732EE72BC568B30A5DF025036151E76EE05B3C761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1