General
- Target 2026-07-18_51a62f7b862e09b22eba30ca28598b85_elex_icedid_njrat_swisyn_vidar
- Size 300KB
- Sample260718-bfzmssbt4n
- SHA256 c5ee326a8e204fbadb5c118a8cfa8f7a3c22026e8b2f66066cd28a14bb45eaa7
- MD5 51a62f7b862e09b22eba30ca28598b85
- SHA1 f9f498f470bac6ca8f69fc28d0532ff0af68c815
- SHA512 c172eaadbf962c5192ea9867c49ae0723f74b0802a8b6a28f8240adb4a7dc6e8424e1d33432eec038f6d036220b2232d4f5707d0acfab642e9f8852924770cb7
- SSDEEP 3072:UVqoCl/YgjxEufVU0TbTyDDalR4n3i+7Q+dOsr3pNUG2Y7gACVZtJ6ExMV9IuR1h:UsLqdufVUNDasy+8g3r1+xV5FM56Vh+
- TLSH T198646C137BA420FEE022C6B458A69609F7323D320B60AE4F176167651F77283BDB571B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_51a62f7b862e09b22eba30ca28598b85_elex_icedid_njrat_swisyn_vidar.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_51a62f7b862e09b22eba30ca28598b85_elex_icedid_njrat_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_51a62f7b862e09b22eba30ca28598b85_elex_icedid_njrat_swisyn_vidar
- Size 300KB
- SHA256 c5ee326a8e204fbadb5c118a8cfa8f7a3c22026e8b2f66066cd28a14bb45eaa7
- MD5 51a62f7b862e09b22eba30ca28598b85
- SHA1 f9f498f470bac6ca8f69fc28d0532ff0af68c815
- SHA512 c172eaadbf962c5192ea9867c49ae0723f74b0802a8b6a28f8240adb4a7dc6e8424e1d33432eec038f6d036220b2232d4f5707d0acfab642e9f8852924770cb7
- SSDEEP 3072:UVqoCl/YgjxEufVU0TbTyDDalR4n3i+7Q+dOsr3pNUG2Y7gACVZtJ6ExMV9IuR1h:UsLqdufVUNDasy+8g3r1+xV5FM56Vh+
- TLSH T198646C137BA420FEE022C6B458A69609F7323D320B60AE4F176167651F77283BDB571B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2