General
- Target 2026-06-02_1e239c6476a0759772b36b4968833dde_elex_icedid_njrat
- Size 1.0MB
- Sample260602-b6m2pact7r
- SHA256 33edce4486d750478fbe8f3900b0f85954e24f3dc243e32264d439f79b358aea
- MD5 1e239c6476a0759772b36b4968833dde
- SHA1 013029456534378bc9d3aba46310909e686b9429
- SHA512 516ee4dd31a51f644dd40bb87297e2cb36b17d41873be871a9b261eac1dd483acc5e6f5a5c9fddbff53bb176374c0ab5b5a87fab9b9fe30615242d905e20a0fe
- SSDEEP 12288:jVer5+nZoyeLMA1tmer5+nIwaJNmozer5+nsok:jxPAPJmtP
- TLSH T10435A113E3818AD5D7990932DE6481A0532AF02D6BFB16727A4C12C8DE57387BF65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_1e239c6476a0759772b36b4968833dde_elex_icedid_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_1e239c6476a0759772b36b4968833dde_elex_icedid_njrat.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_1e239c6476a0759772b36b4968833dde_elex_icedid_njrat
- Size 1.0MB
- SHA256 33edce4486d750478fbe8f3900b0f85954e24f3dc243e32264d439f79b358aea
- MD5 1e239c6476a0759772b36b4968833dde
- SHA1 013029456534378bc9d3aba46310909e686b9429
- SHA512 516ee4dd31a51f644dd40bb87297e2cb36b17d41873be871a9b261eac1dd483acc5e6f5a5c9fddbff53bb176374c0ab5b5a87fab9b9fe30615242d905e20a0fe
- SSDEEP 12288:jVer5+nZoyeLMA1tmer5+nIwaJNmozer5+nsok:jxPAPJmtP
- TLSH T10435A113E3818AD5D7990932DE6481A0532AF02D6BFB16727A4C12C8DE57387BF65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory