General
- Target 2026-05-31_31915f5676a54889c304571d8f8276f9_icedid_njrat
- Size 1.3MB
- Sample260531-tzfcdaez7r
- SHA256 64ea9774bcccd57c4186e66cb435eade214d51898234b06ad06a1dc9e8347611
- MD5 31915f5676a54889c304571d8f8276f9
- SHA1 1a99081afe7996f5d64abc81226c489414b85740
- SHA512 6df009630114cd3d6747f33797f4c18896b2f7909180bf6f11b2dea77b7367dd9c9e52a7b4268b2ec34ed6d1614d9c40da0e054c5ba094f17ac040418bd6b29f
- SSDEEP 24576:rdhBh8H2hnrSN3zkwhBQJQXCr/C1eGrd4xqxy:rzBhTnUBQIC+0uak
- TLSH T17A557B857BA446B5F0B28A348965866DE6727C50D933CE0F11814EEEFFF39418E25B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-31_31915f5676a54889c304571d8f8276f9_icedid_njrat.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-31_31915f5676a54889c304571d8f8276f9_icedid_njrat.exe
Resource
win11-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-31_31915f5676a54889c304571d8f8276f9_icedid_njrat
- Size 1.3MB
- SHA256 64ea9774bcccd57c4186e66cb435eade214d51898234b06ad06a1dc9e8347611
- MD5 31915f5676a54889c304571d8f8276f9
- SHA1 1a99081afe7996f5d64abc81226c489414b85740
- SHA512 6df009630114cd3d6747f33797f4c18896b2f7909180bf6f11b2dea77b7367dd9c9e52a7b4268b2ec34ed6d1614d9c40da0e054c5ba094f17ac040418bd6b29f
- SSDEEP 24576:rdhBh8H2hnrSN3zkwhBQJQXCr/C1eGrd4xqxy:rzBhTnUBQIC+0uak
- TLSH T17A557B857BA446B5F0B28A348965866DE6727C50D933CE0F11814EEEFFF39418E25B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1