General
- Target 2026-10-01_35d5375fd3a79342a90ea260b2104dd0_icedid_njrat_ryuk
- Size 2.5MB
- Sample261002-vbzlsazanc
- SHA256 8f4ff0d63872bfdca481890db2587a752ff9e06f13cb5bc2b8dabdafa3813b36
- MD5 35d5375fd3a79342a90ea260b2104dd0
- SHA1 4bc248bef96c2554c7ec463abe705b70798233d7
- SHA512 08fb323b843b98c8dd709d36f6d4c8f60a7feed1364dada7c22411d6eea818f9cd9f5ce356fbc2ed959e3edd97d48afdf36aa12442a402833c37529571844bc3
- SSDEEP 49152:ESKuhQf3ntMF45YOralyycc4WfvxCSNSzuvnTTaBRHq8LRxSd1LfSQyJ5:LCtWHzNSyvnWRHq4OdBfby3
- TLSH T19DC50116FA41B3F1C6D9D733866306615927DE26ECE247CB175BBA6A2F762C01F23900
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-10-01_35d5375fd3a79342a90ea260b2104dd0_icedid_njrat_ryuk.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_35d5375fd3a79342a90ea260b2104dd0_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_35d5375fd3a79342a90ea260b2104dd0_icedid_njrat_ryuk
- Size 2.5MB
- SHA256 8f4ff0d63872bfdca481890db2587a752ff9e06f13cb5bc2b8dabdafa3813b36
- MD5 35d5375fd3a79342a90ea260b2104dd0
- SHA1 4bc248bef96c2554c7ec463abe705b70798233d7
- SHA512 08fb323b843b98c8dd709d36f6d4c8f60a7feed1364dada7c22411d6eea818f9cd9f5ce356fbc2ed959e3edd97d48afdf36aa12442a402833c37529571844bc3
- SSDEEP 49152:ESKuhQf3ntMF45YOralyycc4WfvxCSNSzuvnTTaBRHq8LRxSd1LfSQyJ5:LCtWHzNSyvnWRHq4OdBfby3
- TLSH T19DC50116FA41B3F1C6D9D733866306615927DE26ECE247CB175BBA6A2F762C01F23900
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Enigma
-
Detects executables packed with Themida
-
Detects executables packed with VMProtect.
-
Suspicious use of NtSetInformationThreadHideFromDebugger