2026-03-27_8c84c9d855b05aae3aaf501fb5f282d1_icedid_njrat_ryuk

Classification: Malicious

2026-03-27_8c84c9d855b05aae3aaf501fb5f282d1_icedid_njrat_ryuk is a malicious file sample. Reported by 1 threat source, last seen 2026-03-27.

Detection summary

  • 53 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Triage 2026-03-27 10:09:12 2026-03-27 10:09:12 malicious-activity

Tags

discovery persistence privilege_escalation ransomware spyware stealer

Sample information

Filenames
2026-03-27_8c84c9d855b05aae3aaf501fb5f282d1_icedid_njrat_ryuk
SHA-256
c693e1d80fce9f41e71bfe6714fbdec412fd40a31fd5ba248ae4cfad9c177870
First indexed
2026-03-27 10:09:12
Last updated
2026-09-03 00:10:51

Antivirus detections

EngineDetection
APEXMalicious
AVGWin64:Expiro-AJ [Inf]
AhnLab-V3Virus/Win.Expiro.X2155
AlibabaVirus:Win64/Expiro.97b83c9f
Antiy-AVLVirus/Win32.Expiro.x
ArcabitWin64.Expiro.Gen.7
AvastWin64:Expiro-AJ [Inf]
AviraW32/Infector.Gen
BitDefenderWin64.Expiro.Gen.7
BkavW64.AIDetectMalware
CAT-QuickHealW32.Expiro.R3
CTXexe.virus.expiro
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
CynetMalicious (score: 99)
DeepInstinctMALICIOUS
DrWebWin32.Expiro.153
ESET-NOD32Win64/Expiro.DP virus
Elasticmalicious (high confidence)
EmsisoftWin64.Expiro.Gen.7 (B)
F-SecureMalware.W32/Infector.Gen
FortinetW64/Expiro.CV
GDataWin64.Expiro.Gen.7
GoogleDetected
GridinsoftTrojan.Heur!.03050023
IkarusVirus.Win64.Expiro
K7AntiVirusVirus ( 005a9e7d1 )
K7GWVirus ( 005a9e7d1 )
KasperskyVirus.Win64.Moiva.a
LionicVirus.Win32.Expiro.n!c
MalwarebytesVirus.M0yv
McAfeeDVirus:Win/Expiro.A
MicroWorld-eScanWin64.Expiro.Gen.7
MicrosoftVirus:Win32/Expiro.HNW!MTB
Paloaltogeneric.ml
PandaW64/Moyv.A
RisingVirus.Expiro!1.A140 (CLASSIC)
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win64.Dropper.rh
SophosW64/Moiva-B
SymantecW64.Xpiro.J!dam
TACHYONVirus/W64.Movia
TencentVirus.Win64.VirMoiva.a
Trapminemalicious.high.ml.score
TrellixENSW32/Expiro.gen.re
TrendMicroVirus.Win64.EXPIRO.SMAJC
TrendMicro-HouseCallVirus.Win64.EXPIRO.SMAJC
VIPREWin64.Expiro.Gen.7
VaristW64/Expiro.AR.gen!Eldorado
VirITWin64.Expiro.AJ
ZoneAlarmW64/Moiva-B
alibabacloudVirus:Win/Expiro.DX
huorongVirus/W64.Expiro.r