Analysis
- max time kernel
149s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/05/2026, 15:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-30_c46f68bac2577bc9eec373a62eaf2a6c_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-30_c46f68bac2577bc9eec373a62eaf2a6c_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target 2026-05-30_c46f68bac2577bc9eec373a62eaf2a6c_elex_hijackloader_icedid_njrat_vidar.exe
- Size 1.1MB
- Sample260530-sdchxsf13x
- SHA256 9f9f822d7f19aa32407d53ad578d0448b950fd9f95f1e235179bf4b67f6bb7f7
- MD5 c46f68bac2577bc9eec373a62eaf2a6c
- SHA1 9cc47db50b64c43234589f97c37fcf8e3d63c0cb
- SHA512 778b80561d77b39571c75b0a00ba36ebdf7d3d73f001af49915b7c53ac638fc3750578226087cb1a810bc19ddf7f3854b63ba00878a64e9f04897a0bd4f5d24b
- SSDEEP 12288:n8j3aukrclln5naYeiveC8omNZHsyClgmw6z2V7rqrCB1igsNBfcsc+ZOnZxB:8zaukrCn5hw/rzVslZOZv
- TLSH T10545291577E5D129E5B34AB49828C7F6AD35BE211F2096DF27803A5C3F325C2D83A326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-05-30_c46f68bac2577bc9eec373a62eaf2a6c_elex_hijackloader_icedid_njrat_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-30_c46f68bac2577bc9eec373a62eaf2a6c_elex_hijackloader_icedid_njrat_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-30_c46f68bac2577bc9eec373a62eaf2a6c_elex_hijackloader_icedid_njrat_vidar.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3696