General
- Target 2026-07-13_d5d8eeb328499171fa0bad8d70cc0bf0_icedid_njrat
- Size 3.4MB
- Sample260714-awc83abv2j
- SHA256 2c5e8a9b28c1ceb55e659a8d61515e8e47f6365908612421d1d6200c9f398cad
- MD5 d5d8eeb328499171fa0bad8d70cc0bf0
- SHA1 52f91041c433d7a5de8e23c475cf64774f589988
- SHA512 b4c1f98702f33b6a07789a9c2a4759b024c75b823826e7d425367d20c649529c704b9abf89549eb04dfc303d484d07edc0efa6c0711afe2558e1b0517c1cab1a
- SSDEEP 49152:YeKXMgpLMY71uiBn65fBeUm4yilK59+4rdEmWOeuRlnKSN7jWlwo+4xGdo/IVEMk:wMCuIoBe/EqngUi/Irs
- TLSH T1E3F59E0A77A841F9D1B7C17D8A464A46F6B278055F3197CF12A4836E2F33AE14E7E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_d5d8eeb328499171fa0bad8d70cc0bf0_icedid_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_d5d8eeb328499171fa0bad8d70cc0bf0_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_d5d8eeb328499171fa0bad8d70cc0bf0_icedid_njrat
- Size 3.4MB
- SHA256 2c5e8a9b28c1ceb55e659a8d61515e8e47f6365908612421d1d6200c9f398cad
- MD5 d5d8eeb328499171fa0bad8d70cc0bf0
- SHA1 52f91041c433d7a5de8e23c475cf64774f589988
- SHA512 b4c1f98702f33b6a07789a9c2a4759b024c75b823826e7d425367d20c649529c704b9abf89549eb04dfc303d484d07edc0efa6c0711afe2558e1b0517c1cab1a
- SSDEEP 49152:YeKXMgpLMY71uiBn65fBeUm4yilK59+4rdEmWOeuRlnKSN7jWlwo+4xGdo/IVEMk:wMCuIoBe/EqngUi/Irs
- TLSH T1E3F59E0A77A841F9D1B7C17D8A464A46F6B278055F3197CF12A4836E2F33AE14E7E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Executes dropped EXE
-
Drops file in System32 directory