General
- Target 2026-11-03_40278cd3f03f668b0f646615a2bcea24_icedid_njrat_ryuk
- Size 2.2MB
- Sample261104-2pte9aeh44
- SHA256 5b2329b7ed88bf8dfefdad6e59d0099af39c32ecf64e854e1931b025a349ca84
- MD5 40278cd3f03f668b0f646615a2bcea24
- SHA1 3a4ac16a16f7ce4f7cd9370204b1a666381168df
- SHA512 8eae5051d085478dd2442884af70ab370ab9db2d9def9b4d189247073af169265c8bb68636142cf14d554f5421cc5317efda2fc01395c0afec80a3f9096ae0c9
- SSDEEP 49152:sdZjEyJFf4WDZHfeTITeYCDzwATbgUXgq4Kc:e/XVEITrCDhTboKc
- TLSH T1DAA59D42BB6815DDC377D23EC5865706E5A0F02903306BEF75AC06E82B13BE91A7E395
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_40278cd3f03f668b0f646615a2bcea24_icedid_njrat_ryuk.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_40278cd3f03f668b0f646615a2bcea24_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_40278cd3f03f668b0f646615a2bcea24_icedid_njrat_ryuk
- Size 2.2MB
- SHA256 5b2329b7ed88bf8dfefdad6e59d0099af39c32ecf64e854e1931b025a349ca84
- MD5 40278cd3f03f668b0f646615a2bcea24
- SHA1 3a4ac16a16f7ce4f7cd9370204b1a666381168df
- SHA512 8eae5051d085478dd2442884af70ab370ab9db2d9def9b4d189247073af169265c8bb68636142cf14d554f5421cc5317efda2fc01395c0afec80a3f9096ae0c9
- SSDEEP 49152:sdZjEyJFf4WDZHfeTITeYCDzwATbgUXgq4Kc:e/XVEITrCDhTboKc
- TLSH T1DAA59D42BB6815DDC377D23EC5865706E5A0F02903306BEF75AC06E82B13BE91A7E395
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1