General
- Target 2026-06-27_d3b1b2567e646621f6c771d964e020fc_icedid_njrat
- Size 810KB
- Sample260629-c171cacv5j
- SHA256 d68ff2c72b07a4d8a1db7d9f3a2b4c79bf9794c2ca9a53a261ef0938ac6c7c1a
- MD5 d3b1b2567e646621f6c771d964e020fc
- SHA1 e7ef983f89f0817e865e8141c1e44419ae6a0279
- SHA512 19993bf9acd71e4a6ecf71c4742facfe52d5b8fd3d95a261ce9d2657cbba7113001b4ad3806a553ae0c2cf9aad4ec79257fe9fc5329b4757c9688b872be840a2
- SSDEEP 12288:Bo0JMNNs9x4kHFYZHCnk1Fj42gdnrO+12N3zT+q:7BHWHJ1e20nrSN3zTP
- TLSH T19005F65577E44BB4F0B28A348965866DA6727851D933CE0F10814EEEFFF39818E25B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_d3b1b2567e646621f6c771d964e020fc_icedid_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_d3b1b2567e646621f6c771d964e020fc_icedid_njrat.exe
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_d3b1b2567e646621f6c771d964e020fc_icedid_njrat
- Size 810KB
- SHA256 d68ff2c72b07a4d8a1db7d9f3a2b4c79bf9794c2ca9a53a261ef0938ac6c7c1a
- MD5 d3b1b2567e646621f6c771d964e020fc
- SHA1 e7ef983f89f0817e865e8141c1e44419ae6a0279
- SHA512 19993bf9acd71e4a6ecf71c4742facfe52d5b8fd3d95a261ce9d2657cbba7113001b4ad3806a553ae0c2cf9aad4ec79257fe9fc5329b4757c9688b872be840a2
- SSDEEP 12288:Bo0JMNNs9x4kHFYZHCnk1Fj42gdnrO+12N3zT+q:7BHWHJ1e20nrSN3zTP
- TLSH T19005F65577E44BB4F0B28A348965866DA6727851D933CE0F10814EEEFFF39818E25B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.