General
- Target 2026-07-06_5b63343636a65997d5e72263b4dad827_icedid_njrat_vidar
- Size 2.2MB
- Sample260707-d5p6rses2k
- SHA256 2a5ebc676c2b72190fe55864280c60bff20865b0cb2f9f7d5dddb265a341f410
- MD5 5b63343636a65997d5e72263b4dad827
- SHA1 e88037c704ccaac63f7896b64d89830457169128
- SHA512 938eea224923a653c1027ee2a139600c8c65322dbc257b6bc4942e9f262dfd5fe5cbb125cc033261a6cd94baf63113b3a6988b181d9f2701aed13f6c76dff505
- SSDEEP 24576:cPDDOB0RZhjHiRFRZcwUPbb/w35gUrVEj/PfEXXJugTHnxosVun:ADDO8hjHiLRZcPbb/eZrVoPfMZDxri
- TLSH T14FB52A65656444DCCDA58236ED6ACA31B5B27CC4072285EF63E57F2B3F32BE09D3A201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-06_5b63343636a65997d5e72263b4dad827_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_5b63343636a65997d5e72263b4dad827_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_5b63343636a65997d5e72263b4dad827_icedid_njrat_vidar
- Size 2.2MB
- SHA256 2a5ebc676c2b72190fe55864280c60bff20865b0cb2f9f7d5dddb265a341f410
- MD5 5b63343636a65997d5e72263b4dad827
- SHA1 e88037c704ccaac63f7896b64d89830457169128
- SHA512 938eea224923a653c1027ee2a139600c8c65322dbc257b6bc4942e9f262dfd5fe5cbb125cc033261a6cd94baf63113b3a6988b181d9f2701aed13f6c76dff505
- SSDEEP 24576:cPDDOB0RZhjHiRFRZcwUPbb/w35gUrVEj/PfEXXJugTHnxosVun:ADDO8hjHiLRZcPbb/eZrVoPfMZDxri
- TLSH T14FB52A65656444DCCDA58236ED6ACA31B5B27CC4072285EF63E57F2B3F32BE09D3A201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.