General
- Target 2026-07-20_38ca690ddd8d76f5ed0b6a75ce9e3824_icedid_njrat_vidar
- Size 4.7MB
- Sample260720-dtzk3adx5m
- SHA256 d0661488c328ff8463052398c118c980af5147fff3c310356a47e22f8dd26873
- MD5 38ca690ddd8d76f5ed0b6a75ce9e3824
- SHA1 cc1fdfcaff9b6e50a716c944a169c53047469a7d
- SHA512 b7d40a764a8223a4ea9b1ed754d64580c0b0edc66a295f615fc1e8543d123de883a5e12bd07f00befe7777fc4a1bb5a0069746d40aba7f7bda6483d5320c4012
- SSDEEP 49152:mdRba8fD8qinfMSKJXIUQREV1QOTu1U5ai2fzYo5UC9RhuCTFKlaxV5dgbTj7Jcv:5/IJsiCfsop7cTJPdwi3Q
- TLSH T133366C656BF880F5E1A7E134897AC9B2F77678020D71EB5F0251CA1F2F33A904D29726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_38ca690ddd8d76f5ed0b6a75ce9e3824_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_38ca690ddd8d76f5ed0b6a75ce9e3824_icedid_njrat_vidar
- Size 4.7MB
- SHA256 d0661488c328ff8463052398c118c980af5147fff3c310356a47e22f8dd26873
- MD5 38ca690ddd8d76f5ed0b6a75ce9e3824
- SHA1 cc1fdfcaff9b6e50a716c944a169c53047469a7d
- SHA512 b7d40a764a8223a4ea9b1ed754d64580c0b0edc66a295f615fc1e8543d123de883a5e12bd07f00befe7777fc4a1bb5a0069746d40aba7f7bda6483d5320c4012
- SSDEEP 49152:mdRba8fD8qinfMSKJXIUQREV1QOTu1U5ai2fzYo5UC9RhuCTFKlaxV5dgbTj7Jcv:5/IJsiCfsop7cTJPdwi3Q
- TLSH T133366C656BF880F5E1A7E134897AC9B2F77678020D71EB5F0251CA1F2F33A904D29726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory