2026-10-10_38b212f14c49bb47696f1761b44c80e7_icedid_ryuk

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-10_38b212f14c49bb47696f1761b44c80e7_icedid_ryuk
Size 850KB
Sample261011-vdb89sdg33
SHA256 37fc5b3874e4e242da792f6274d6b4d4523c817db53295f6329a6360a0dbcaa5
MD5 38b212f14c49bb47696f1761b44c80e7
SHA1 b4ab2cb5af25ab39fcb2e329753766757de90f33
SHA512 e9d1102d972bb87da509a649fb4f2fb6d4dd0efeecb41e0e418a4c83d881c953c3ee7f5473c81928d101b455e83c96b8140e7a7e96cecdbc473f7b69d4dd77e7
SSDEEP 24576:k7lcIlyoJ0CJ56BzupduopxPEVwiU7Jfek:kxcIooJ0krP5pn
TLSH
T1F705E10BF3A178E4D963C978C9149617FB22F8798310FE7B4F1582529F17A98AC2DB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-10_38b212f14c49bb47696f1761b44c80e7_icedid_ryuk

File Explorer

2026-10-10_38b212f14c49bb47696f1761b44c80e7_icedid_ryuk

.exe 850KB

2026-10-10_38b212f14c49bb47696f1761b44c80e7_icedid_ryuk

IMPHASH c1723bf8d25ca6e9d2b0b2774cf21dd9
SHA256 37fc5b3874e4e242da792f6274d6b4d4523c817db53295f6329a6360a0dbcaa5
MD5 38b212f14c49bb47696f1761b44c80e7
SHA1 b4ab2cb5af25ab39fcb2e329753766757de90f33
SHA512 e9d1102d972bb87da509a649fb4f2fb6d4dd0efeecb41e0e418a4c83d881c953c3ee7f5473c81928d101b455e83c96b8140e7a7e96cecdbc473f7b69d4dd77e7
SSDEEP 24576:k7lcIlyoJ0CJ56BzupduopxPEVwiU7Jfek:kxcIooJ0krP5pn
TLSH
T1F705E10BF3A178E4D963C978C9149617FB22F8798310FE7B4F1582529F17A98AC2DB11
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

119432

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

AddVectoredExceptionHandler CloseHandle CreateFileW DeleteCriticalSection EncodePointer EnterCriticalSection ExitProcess FindClose FindFirstFileExA FindNextFileA FindResourceExA FlushFileBuffers FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleCP GetConsoleMode GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetFileType GetLastError GetModuleFileNameA GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemTimeAsFileTime HeapAlloc HeapCreate HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryExW LoadResource LockResource MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency RaiseException RtlAddFunctionTable RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwindEx RtlVirtualUnwind SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter SizeofResource Sleep TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter UnmapViewOfFile VirtualAlloc VirtualFree VirtualProtect WideCharToMultiByte WriteConsoleW WriteFile

Name

.text

Size

162KB

Virtual Size

162KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

30KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

601KB

Virtual Size

604KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-10_38b212f14c49bb47696f1761b44c80e7_icedid_ryuk

kernel32

generic