General
- Target 2026-07-10_d75ed08fafcfcc0a1db5c6fc6279e26a_elex_icedid_njrat
- Size 1.0MB
- Sample260710-c7pscacs8k
- SHA256 cc9399f7d72c6e5bad1b6ee8d23e59c55eb54d1a8e5edc597161ae2da49d8516
- MD5 d75ed08fafcfcc0a1db5c6fc6279e26a
- SHA1 cb06edd953d64b1ee2cef45d8f83aea1319aebbe
- SHA512 8d7578a8ea044ac25a7ba7287c42b933f56728ffee41409493e8358b183af8b250eac2d34d4289186186c755a4e4d03269ca10f0e03ebb878d13427bb0560016
- SSDEEP 12288:jVer5+nZoyeLMA1tmer5+nIwaJNmozer5+nsoA:jxPAPJmtB
- TLSH T10135A113E3818AD5D7990932DE6481A0532AF02D6BFB16727A4C12C8DE57387BF65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_d75ed08fafcfcc0a1db5c6fc6279e26a_elex_icedid_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_d75ed08fafcfcc0a1db5c6fc6279e26a_elex_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_d75ed08fafcfcc0a1db5c6fc6279e26a_elex_icedid_njrat
- Size 1.0MB
- SHA256 cc9399f7d72c6e5bad1b6ee8d23e59c55eb54d1a8e5edc597161ae2da49d8516
- MD5 d75ed08fafcfcc0a1db5c6fc6279e26a
- SHA1 cb06edd953d64b1ee2cef45d8f83aea1319aebbe
- SHA512 8d7578a8ea044ac25a7ba7287c42b933f56728ffee41409493e8358b183af8b250eac2d34d4289186186c755a4e4d03269ca10f0e03ebb878d13427bb0560016
- SSDEEP 12288:jVer5+nZoyeLMA1tmer5+nIwaJNmozer5+nsoA:jxPAPJmtB
- TLSH T10135A113E3818AD5D7990932DE6481A0532AF02D6BFB16727A4C12C8DE57387BF65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory