General
- Target 2026-11-12_48e5700129ede1562413487ebc217de7_icedid_njrat_ryuk
- Size 1.6MB
- Sample261113-ef3agaft51
- SHA256 3da20e19862790f5ae5faf87682adbecf06320010e8fc641f6ec1c0fbacdf657
- MD5 48e5700129ede1562413487ebc217de7
- SHA1 9c04df05298f5e62c98649121672b5e11b54ef1a
- SHA512 d8fd84af59c0a16dc27671edbff13e6e16b2636194036e5014244bed4a2f3a9d9ff1b048ebc9c2e2b3e5b144c0e945a0626df5ba2356f02e699ec68519258180
- SSDEEP 24576:dbHFk9uQrKYmcR/hienYsqjnhMgeiCl7G0nehbGZpbD:dmhienEDmg27RnWGj
- TLSH T1C175F166F75419BAD17BD238CA564A15E8B33C064B20A34F13F917AA1F33360663FB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-12_48e5700129ede1562413487ebc217de7_icedid_njrat_ryuk.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-12_48e5700129ede1562413487ebc217de7_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-12_48e5700129ede1562413487ebc217de7_icedid_njrat_ryuk
- Size 1.6MB
- SHA256 3da20e19862790f5ae5faf87682adbecf06320010e8fc641f6ec1c0fbacdf657
- MD5 48e5700129ede1562413487ebc217de7
- SHA1 9c04df05298f5e62c98649121672b5e11b54ef1a
- SHA512 d8fd84af59c0a16dc27671edbff13e6e16b2636194036e5014244bed4a2f3a9d9ff1b048ebc9c2e2b3e5b144c0e945a0626df5ba2356f02e699ec68519258180
- SSDEEP 24576:dbHFk9uQrKYmcR/hienYsqjnhMgeiCl7G0nehbGZpbD:dmhienEDmg27RnWGj
- TLSH T1C175F166F75419BAD17BD238CA564A15E8B33C064B20A34F13F917AA1F33360663FB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1