General
- Target 2026-07-14_0a4440b7aa0fde40ea722e7f6fd4f864_icedid_njrat_vidar
- Size 4.7MB
- Sample260714-e7x5tsgw51
- SHA256 b1d036008be3836df46fe86eb0bf2e89292d0bc506e8bfaa224919ce67ba6675
- MD5 0a4440b7aa0fde40ea722e7f6fd4f864
- SHA1 04f3ca8e50640969211a9fcebd13aef9d4cb6629
- SHA512 ee6f225c6e658abacd3c7876b8408400c9e2141395ce773c6c456c3cbe2624f217802ff556e5bb54d5b73641201fc17824c1e3a3e8ee7e67cd9de8577a3090be
- SSDEEP 49152:GdRba8fD8qinfMSKJXIUQREV1QOTu1U5ai2vzYo5UC9RhuCTFKlaxV5dgbT+JOBx:Z/IJsiCvsop7cT+SR8nR
- TLSH T18A366C656BF880F5E1A7E134897AC9B2F77678020D71EB5F0251CA1F2F33A904D29726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_0a4440b7aa0fde40ea722e7f6fd4f864_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_0a4440b7aa0fde40ea722e7f6fd4f864_icedid_njrat_vidar
- Size 4.7MB
- SHA256 b1d036008be3836df46fe86eb0bf2e89292d0bc506e8bfaa224919ce67ba6675
- MD5 0a4440b7aa0fde40ea722e7f6fd4f864
- SHA1 04f3ca8e50640969211a9fcebd13aef9d4cb6629
- SHA512 ee6f225c6e658abacd3c7876b8408400c9e2141395ce773c6c456c3cbe2624f217802ff556e5bb54d5b73641201fc17824c1e3a3e8ee7e67cd9de8577a3090be
- SSDEEP 49152:GdRba8fD8qinfMSKJXIUQREV1QOTu1U5ai2vzYo5UC9RhuCTFKlaxV5dgbT+JOBx:Z/IJsiCvsop7cT+SR8nR
- TLSH T18A366C656BF880F5E1A7E134897AC9B2F77678020D71EB5F0251CA1F2F33A904D29726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory