General
- Target 2026-06-28_55b0a49b00c7f64bfd24cab1aa230f7d_elex_icedid_njrat_vidar
- Size 5.8MB
- Sample260630-sy2zbact61
- SHA256 24ba5cfa613cf545950f4b3fb440d053aaa93138c558f2d471f89fb41c5ee634
- MD5 55b0a49b00c7f64bfd24cab1aa230f7d
- SHA1 90debc30470163e7edc656d54803623a72061082
- SHA512 551ab3ebaf40fc4249e3dfb5382236866241a7a1c3f61d7294b9c20e427cd39ebdea718db57885b55d88a0abd29753a190fc302b18b5bbb1814dca7f88407da7
- SSDEEP 12288:w4Ryed8I7r/7mr4Ryed8I7r/7mWXAm3ggRUeMz9TNXvk+:w4R5CIH/744R5CIH/7mm3NCdBTNs+
- TLSH T1A3566C31B74098AAE863C5B1BC24851AB9723D7106909C1FB3C57B592E736E3B8B471F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_55b0a49b00c7f64bfd24cab1aa230f7d_elex_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_55b0a49b00c7f64bfd24cab1aa230f7d_elex_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260629-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_55b0a49b00c7f64bfd24cab1aa230f7d_elex_icedid_njrat_vidar
- Size 5.8MB
- SHA256 24ba5cfa613cf545950f4b3fb440d053aaa93138c558f2d471f89fb41c5ee634
- MD5 55b0a49b00c7f64bfd24cab1aa230f7d
- SHA1 90debc30470163e7edc656d54803623a72061082
- SHA512 551ab3ebaf40fc4249e3dfb5382236866241a7a1c3f61d7294b9c20e427cd39ebdea718db57885b55d88a0abd29753a190fc302b18b5bbb1814dca7f88407da7
- SSDEEP 12288:w4Ryed8I7r/7mr4Ryed8I7r/7mWXAm3ggRUeMz9TNXvk+:w4R5CIH/744R5CIH/7mm3NCdBTNs+
- TLSH T1A3566C31B74098AAE863C5B1BC24851AB9723D7106909C1FB3C57B592E736E3B8B471F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10Grants admin privileges
Uses net.exe to modify the user's privileges.
Drops file in Drivers directory
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Disables service(s)
Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1