General
- Target 2026-10-15_0c33490decdba7bdea77b23c1d456b1b_icedid_mespinoza_njrat_rokrat_ryuk
- Size 1.2MB
- Sample261016-3gfd4aez2x
- SHA256 9cfb49faa1fe56fcc59dcfc5b5d47357d333588f2fc4f11577083b9444ff3793
- MD5 0c33490decdba7bdea77b23c1d456b1b
- SHA1 9b80ce893d243687798ffde771bb1acb4e725cb7
- SHA512 bfbe9a1955e6e3e74fe0f27c503f4e479ea56f451a18ac6acb156161c7e72bc6ea15730bf745e5220a352e8730e6c30fc97c3c498423279f035877645387471e
- SSDEEP 24576:G105UPzEXp6040KE1wYBfY6PTsXan5rN3uSZGIcHMLahDV0vncDz50MUGTgcw:G2UPzYp6N0KE1wYBH5vZGIcHMLahDV0t
- TLSH T1F6555B1C695481E4C1B6D0B8CB56A5DBF761BC654721FACB0290B22F2E73AE04EFF560
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-15_0c33490decdba7bdea77b23c1d456b1b_icedid_mespinoza_njrat_rokrat_ryuk.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-15_0c33490decdba7bdea77b23c1d456b1b_icedid_mespinoza_njrat_rokrat_ryuk.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-15_0c33490decdba7bdea77b23c1d456b1b_icedid_mespinoza_njrat_rokrat_ryuk
- Size 1.2MB
- SHA256 9cfb49faa1fe56fcc59dcfc5b5d47357d333588f2fc4f11577083b9444ff3793
- MD5 0c33490decdba7bdea77b23c1d456b1b
- SHA1 9b80ce893d243687798ffde771bb1acb4e725cb7
- SHA512 bfbe9a1955e6e3e74fe0f27c503f4e479ea56f451a18ac6acb156161c7e72bc6ea15730bf745e5220a352e8730e6c30fc97c3c498423279f035877645387471e
- SSDEEP 24576:G105UPzEXp6040KE1wYBfY6PTsXan5rN3uSZGIcHMLahDV0vncDz50MUGTgcw:G2UPzYp6N0KE1wYBH5vZGIcHMLahDV0t
- TLSH T1F6555B1C695481E4C1B6D0B8CB56A5DBF761BC654721FACB0290B22F2E73AE04EFF560
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.