General
- Target 2026-06-27_bf24158918cf7fc046b22aac8e7336e6_elex_icedid_njrat
- Size 1.0MB
- Sample260629-dv548sds5r
- SHA256 6eef87c7d3d64c595aab35bcd1e4209fbaf733bfec79923ea106cdf305acbf9f
- MD5 bf24158918cf7fc046b22aac8e7336e6
- SHA1 c6fce615cb7bd379f38b42b2087d0129a62aa68c
- SHA512 0712fef149164fa7434221a61c45490654038382140e045ad20923aa3ec3badfc39c1f706788927efeb2c3d444973da31539bf4c5f33a557de9a07bd3fe26846
- SSDEEP 12288:jVer5+nZoyeLMA1tmer5+nIwaJNmozer5+nsom:jxPAPJmtv
- TLSH T1C135A113E3818AD5D7990932DE6481A0532AF02D6BFB16727A4C12CCDE57387BF65A3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_bf24158918cf7fc046b22aac8e7336e6_elex_icedid_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_bf24158918cf7fc046b22aac8e7336e6_elex_icedid_njrat.exe
Resource
win11ltsc2024-20260618-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_bf24158918cf7fc046b22aac8e7336e6_elex_icedid_njrat
- Size 1.0MB
- SHA256 6eef87c7d3d64c595aab35bcd1e4209fbaf733bfec79923ea106cdf305acbf9f
- MD5 bf24158918cf7fc046b22aac8e7336e6
- SHA1 c6fce615cb7bd379f38b42b2087d0129a62aa68c
- SHA512 0712fef149164fa7434221a61c45490654038382140e045ad20923aa3ec3badfc39c1f706788927efeb2c3d444973da31539bf4c5f33a557de9a07bd3fe26846
- SSDEEP 12288:jVer5+nZoyeLMA1tmer5+nIwaJNmozer5+nsom:jxPAPJmtv
- TLSH T1C135A113E3818AD5D7990932DE6481A0532AF02D6BFB16727A4C12CCDE57387BF65A3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory