General
- Target 2026-07-06_4847e42f4cb3cd7f6bd49f9bebda94f4_elex_icedid_njrat_vidar
- Size 749KB
- Sample260707-elmrzaew2k
- SHA256 fa26c684375efcca08d9fa837ea9a7c5715f51352e0e1000294d2b0c5e7c7e50
- MD5 4847e42f4cb3cd7f6bd49f9bebda94f4
- SHA1 1f1c6c9962c1a306baa3c3a7c493633f2ed52962
- SHA512 2adc5c11115cb3317bd936d9ac3ada6080f0142e3453dec92bfa18d93cab65ce990dd01f0f1338391a076817e6d01d4dc974f336977582e8974bdc9fd53c724b
- SSDEEP 12288:6H7MPDAfChAD+k3HVJ5xDfp4D7/SAOZi+5v4+rcKftV:6H7KD+JVJTt4D7/SAOZi+5v48cKfn
- TLSH T1B0F49E15B3A104F1D177A239C9669732F9727C164B30E64F1368C6690F237A1AE3EF26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-07-06_4847e42f4cb3cd7f6bd49f9bebda94f4_elex_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_4847e42f4cb3cd7f6bd49f9bebda94f4_elex_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_4847e42f4cb3cd7f6bd49f9bebda94f4_elex_icedid_njrat_vidar
- Size 749KB
- SHA256 fa26c684375efcca08d9fa837ea9a7c5715f51352e0e1000294d2b0c5e7c7e50
- MD5 4847e42f4cb3cd7f6bd49f9bebda94f4
- SHA1 1f1c6c9962c1a306baa3c3a7c493633f2ed52962
- SHA512 2adc5c11115cb3317bd936d9ac3ada6080f0142e3453dec92bfa18d93cab65ce990dd01f0f1338391a076817e6d01d4dc974f336977582e8974bdc9fd53c724b
- SSDEEP 12288:6H7MPDAfChAD+k3HVJ5xDfp4D7/SAOZi+5v4+rcKftV:6H7KD+JVJTt4D7/SAOZi+5v48cKfn
- TLSH T1B0F49E15B3A104F1D177A239C9669732F9727C164B30E64F1368C6690F237A1AE3EF26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory