General
- Target 2026-06-30_11a5a07d2810bd5f75e27839eb555adf_icedid_njrat_vidar
- Size 942KB
- Sample260701-a1hpcads6z
- SHA256 dcbc1e0f5fa13e818b9c327e54ffab67c1cff1d54d9ea06f64f44783cc745dae
- MD5 11a5a07d2810bd5f75e27839eb555adf
- SHA1 d6bbe44b4f21c83fd3a1f217c7f051e0ef46c8c9
- SHA512 74b4d13c2b285ca66aaa0418dd6b6a1319c1e015b6016aed2f2e98273e29b2f628f066a94f05a6abd5514c874229d07f9abd3dd45706d2e29525282e339a4b73
- SSDEEP 24576:ly5/Ba7O5rr+x3PH79S1xyGvQhH88LjFGpKn+HA:liBf5rrmfY1oGQGmM3g
- TLSH T16825F149F3F404F9E5B78138CD62894BD6B27C9B07B0D69F12A4429A1F336618D2EF25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_11a5a07d2810bd5f75e27839eb555adf_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_11a5a07d2810bd5f75e27839eb555adf_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260629-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_11a5a07d2810bd5f75e27839eb555adf_icedid_njrat_vidar
- Size 942KB
- SHA256 dcbc1e0f5fa13e818b9c327e54ffab67c1cff1d54d9ea06f64f44783cc745dae
- MD5 11a5a07d2810bd5f75e27839eb555adf
- SHA1 d6bbe44b4f21c83fd3a1f217c7f051e0ef46c8c9
- SHA512 74b4d13c2b285ca66aaa0418dd6b6a1319c1e015b6016aed2f2e98273e29b2f628f066a94f05a6abd5514c874229d07f9abd3dd45706d2e29525282e339a4b73
- SSDEEP 24576:ly5/Ba7O5rr+x3PH79S1xyGvQhH88LjFGpKn+HA:liBf5rrmfY1oGQGmM3g
- TLSH T16825F149F3F404F9E5B78138CD62894BD6B27C9B07B0D69F12A4429A1F336618D2EF25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory