Analysis
- max time kernel
149s - max time network
145s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
29/05/2026, 18:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-29_e9f60de7518fd84fbf8d20671e39f8c4_amadey_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-29_e9f60de7518fd84fbf8d20671e39f8c4_amadey_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target 2026-05-29_e9f60de7518fd84fbf8d20671e39f8c4_amadey_elex_hijackloader_icedid_njrat_vidar.exe
- Size 1.5MB
- Sample260529-wpjcdsbz71
- SHA256 aa9aebc6f5aa72c9f034016ab9e19b2b12615a2ca3fa087ae08b375b2cfa4014
- MD5 e9f60de7518fd84fbf8d20671e39f8c4
- SHA1 d678ec25e358503f0b979bda8fb7dcc3f43de421
- SHA512 8410b58c158f45c9b6de3e9982f6c8705364b5f4abb437904f91b98287b850e4ed8a9159cc1a7e8d2753d4f5331392e1e47e8065425edb999f29d30ec9f431ab
- SSDEEP 24576:8zauM0Le5ji0hmxNrMq3hBh8H2hnrSN3zSb:82hPji0AjzRBhTnj
- TLSH T1CF652915B6A44771E072C574C9A1966EEA317841CB33CE8B12818EEDBFE3AD18E35731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-05-29_e9f60de7518fd84fbf8d20671e39f8c4_amadey_elex_hijackloader_icedid_njrat_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-29_e9f60de7518fd84fbf8d20671e39f8c4_amadey_elex_hijackloader_icedid_njrat_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-29_e9f60de7518fd84fbf8d20671e39f8c4_amadey_elex_hijackloader_icedid_njrat_vidar.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4404