General
- Target 2026-11-03_64a6e93183e6b04e009372bbe1e75120_icedid_mespinoza_njrat_ryuk
- Size 1.6MB
- Sample261104-xavybacw2z
- SHA256 8478bf06835f906be8c8f269bac2fb8aabf14f802d836d4493d59c9c3aa5a81e
- MD5 64a6e93183e6b04e009372bbe1e75120
- SHA1 03eae667192e6edd661045379933809e3c535ab1
- SHA512 ea87a77590b91991f3de2342f06dde36a1b3b485b1dd7bb79106c46891759b85a265dcb0be704bcd6de0ba18d905cf11442da07e77ee85fd9fe4ad4be0322f4b
- SSDEEP 24576:YEPxoECLW1RcD9dOB3aLXkwcIBIbH0LxvXqbwGRz55jAre8MjKiwi:bCLW1RcDvOB3aLVcIjLxvXGApMjKS
- TLSH T13375E145EBE504F4E1B39634C9B24506E7B37C865BB0C65F33A9855B2F73A908D38B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_64a6e93183e6b04e009372bbe1e75120_icedid_mespinoza_njrat_ryuk.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_64a6e93183e6b04e009372bbe1e75120_icedid_mespinoza_njrat_ryuk.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_64a6e93183e6b04e009372bbe1e75120_icedid_mespinoza_njrat_ryuk
- Size 1.6MB
- SHA256 8478bf06835f906be8c8f269bac2fb8aabf14f802d836d4493d59c9c3aa5a81e
- MD5 64a6e93183e6b04e009372bbe1e75120
- SHA1 03eae667192e6edd661045379933809e3c535ab1
- SHA512 ea87a77590b91991f3de2342f06dde36a1b3b485b1dd7bb79106c46891759b85a265dcb0be704bcd6de0ba18d905cf11442da07e77ee85fd9fe4ad4be0322f4b
- SSDEEP 24576:YEPxoECLW1RcD9dOB3aLXkwcIBIbH0LxvXqbwGRz55jAre8MjKiwi:bCLW1RcDvOB3aLVcIjLxvXGApMjKS
- TLSH T13375E145EBE504F4E1B39634C9B24506E7B37C865BB0C65F33A9855B2F73A908D38B22
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory