General
- Target 2026-05-11_aa8d2b27f5e62ecacaf9846d293b7901_elex_icedid_njrat
- Size 1.0MB
- Sample260511-msad8afw81
- SHA256 05118dc61ad97264f02695c8cf15d0c2fc87f38dfee779a6c956547590df182a
- MD5 aa8d2b27f5e62ecacaf9846d293b7901
- SHA1 9261c0a0ea46344a5a4fee0def63afb41042ed70
- SHA512 3424a530a16d813b11b703ac9d42edfe3dbb0e531e753ede96bf34b79f786989b024331a3195b57bf90fd1c6d4058d316e5e9a551764b1af02b22fa0d7dc8b69
- SSDEEP 12288:jVer5+nZoyeLMA1tmer5+nIwaJNmozer5+nsod:jxPAPJmtu
- TLSH T10135A117E3818AD5D7990932DE6481A0532AF02D6BFB16723A4C12C8DE57387BF65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-11_aa8d2b27f5e62ecacaf9846d293b7901_elex_icedid_njrat.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-11_aa8d2b27f5e62ecacaf9846d293b7901_elex_icedid_njrat.exe
Resource
win11-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-11_aa8d2b27f5e62ecacaf9846d293b7901_elex_icedid_njrat
- Size 1.0MB
- SHA256 05118dc61ad97264f02695c8cf15d0c2fc87f38dfee779a6c956547590df182a
- MD5 aa8d2b27f5e62ecacaf9846d293b7901
- SHA1 9261c0a0ea46344a5a4fee0def63afb41042ed70
- SHA512 3424a530a16d813b11b703ac9d42edfe3dbb0e531e753ede96bf34b79f786989b024331a3195b57bf90fd1c6d4058d316e5e9a551764b1af02b22fa0d7dc8b69
- SSDEEP 12288:jVer5+nZoyeLMA1tmer5+nIwaJNmozer5+nsod:jxPAPJmtu
- TLSH T10135A117E3818AD5D7990932DE6481A0532AF02D6BFB16723A4C12C8DE57387BF65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
Drops file in System32 directory