General
- Target 2026-07-08_b4d0d16438747e243427d1283d99c98a_icedid_njrat
- Size 810KB
- Sample260708-vlpvbscz9j
- SHA256 a1f22a1457f1697d093ca46660fc12ab7c6a5877a3044860b1faf8de549d22a8
- MD5 b4d0d16438747e243427d1283d99c98a
- SHA1 ab402891f58cceb11ed5e1bdfba7156b3347b9e8
- SHA512 cccf9ec97e68f382c977bde9cd7dc174d4d0f8f908cae267dc992f5cae9427f70f4f5f1171091b407dcbb736f71bab69791ec5c959cb53ef6bb4b232f85c7284
- SSDEEP 12288:BokJbNYs9+m9dMh5tMcIF124dnrO+12N3zlEW:rN9S5D62snrSN3zlEW
- TLSH T1CA05F6557BA446B4F0B28A348935866DAA727C50D933CE0F10914EEEFFF39518E25B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_b4d0d16438747e243427d1283d99c98a_icedid_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_b4d0d16438747e243427d1283d99c98a_icedid_njrat.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_b4d0d16438747e243427d1283d99c98a_icedid_njrat
- Size 810KB
- SHA256 a1f22a1457f1697d093ca46660fc12ab7c6a5877a3044860b1faf8de549d22a8
- MD5 b4d0d16438747e243427d1283d99c98a
- SHA1 ab402891f58cceb11ed5e1bdfba7156b3347b9e8
- SHA512 cccf9ec97e68f382c977bde9cd7dc174d4d0f8f908cae267dc992f5cae9427f70f4f5f1171091b407dcbb736f71bab69791ec5c959cb53ef6bb4b232f85c7284
- SSDEEP 12288:BokJbNYs9+m9dMh5tMcIF124dnrO+12N3zlEW:rN9S5D62snrSN3zlEW
- TLSH T1CA05F6557BA446B4F0B28A348935866DAA727C50D933CE0F10914EEEFFF39518E25B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.