General
- Target 2026-05-11_ecd7a675f9f6b5bbdd760c1230b69d6b_icedid_njrat_vidar
- Size 747KB
- Sample260511-m6abdaf171
- SHA256 55ef9c97d9cb337fe0ad7d20b06f3f81447e014441eac737caa85797211a40af
- MD5 ecd7a675f9f6b5bbdd760c1230b69d6b
- SHA1 2c1578066e217dd4ad95439aea32d6e1c916192e
- SHA512 9d9080a9c64b0b952c9f90e858fe2bd1df5febe1c1edb0a1a7e9b1cb4a13d0e304ef0970ccb6d6d5c3962f9173d4795309af2fc1d65cef5f9bad3bbf058046e4
- SSDEEP 12288:+iEhwdbT8iSTq5PrwqlY29w7YD+1FvjmR8Kclr+mazj/+oImfujU0Qq+tGr:eKdH8bTqFUhd0II8KclDaHm6Wjh/+t
- TLSH T104F4F146729020DAD5637275A81FC32FA7B17C6B4730A63B135C7F5A1F36290AE19B31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-11_ecd7a675f9f6b5bbdd760c1230b69d6b_icedid_njrat_vidar.exe
Resource
win10v2004-20260130-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-11_ecd7a675f9f6b5bbdd760c1230b69d6b_icedid_njrat_vidar.exe
Resource
win11-20260130-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-11_ecd7a675f9f6b5bbdd760c1230b69d6b_icedid_njrat_vidar
- Size 747KB
- SHA256 55ef9c97d9cb337fe0ad7d20b06f3f81447e014441eac737caa85797211a40af
- MD5 ecd7a675f9f6b5bbdd760c1230b69d6b
- SHA1 2c1578066e217dd4ad95439aea32d6e1c916192e
- SHA512 9d9080a9c64b0b952c9f90e858fe2bd1df5febe1c1edb0a1a7e9b1cb4a13d0e304ef0970ccb6d6d5c3962f9173d4795309af2fc1d65cef5f9bad3bbf058046e4
- SSDEEP 12288:+iEhwdbT8iSTq5PrwqlY29w7YD+1FvjmR8Kclr+mazj/+oImfujU0Qq+tGr:eKdH8bTqFUhd0II8KclDaHm6Wjh/+t
- TLSH T104F4F146729020DAD5637275A81FC32FA7B17C6B4730A63B135C7F5A1F36290AE19B31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1