General
- Target 2026-07-17_f44a6c94e0a9794056b7150862ba3534_elex_icedid_njrat
- Size 2.1MB
- Sample260717-fm7n7sbs8k
- SHA256 25d73b07c2aa510c65fe5bea9cff22d2f14c1c2cc6453d440d52f2f63b73b825
- MD5 f44a6c94e0a9794056b7150862ba3534
- SHA1 18097d0c8dd1f00b099874421f748d72a7583e67
- SHA512 46b12dc9de7068f5b65496765ec8ba12752df6be46c3a9a9e2ffeca6045d6ca89078f40e6584129c1169499b9e80b0c61110fbb2463721fda83dbd8cbc1f07f2
- SSDEEP 24576:1Zv65D3JJQdtvkMkj0zIR+Tf3NnlatHIy4UvTtsq0R03MfI83kJktCHaKCdvcx:1ZC5D3MTvAR+T3NnINyl63qUJk0hqo
- TLSH T1BBA57B47A3D840D9E059C178F73A8522EA627C450BECA6DF02DCB6591FBBED49B39310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_f44a6c94e0a9794056b7150862ba3534_elex_icedid_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_f44a6c94e0a9794056b7150862ba3534_elex_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_f44a6c94e0a9794056b7150862ba3534_elex_icedid_njrat
- Size 2.1MB
- SHA256 25d73b07c2aa510c65fe5bea9cff22d2f14c1c2cc6453d440d52f2f63b73b825
- MD5 f44a6c94e0a9794056b7150862ba3534
- SHA1 18097d0c8dd1f00b099874421f748d72a7583e67
- SHA512 46b12dc9de7068f5b65496765ec8ba12752df6be46c3a9a9e2ffeca6045d6ca89078f40e6584129c1169499b9e80b0c61110fbb2463721fda83dbd8cbc1f07f2
- SSDEEP 24576:1Zv65D3JJQdtvkMkj0zIR+Tf3NnlatHIy4UvTtsq0R03MfI83kJktCHaKCdvcx:1ZC5D3MTvAR+T3NnINyl63qUJk0hqo
- TLSH T1BBA57B47A3D840D9E059C178F73A8522EA627C450BECA6DF02DCB6591FBBED49B39310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application