General
- Target 2026-07-22_4d6221acb4a6f3ade841c6d1b9ed45de_elex_icedid_njrat
- Size 1.0MB
- Sample260722-wffvxa1bpg
- SHA256 f4a5b3e2ab1bd5c474a112d8c11130f6f9a1d51462670540eb90951f2317952a
- MD5 4d6221acb4a6f3ade841c6d1b9ed45de
- SHA1 19fe194d125e7412310196e7f4c87eb7b9dc90af
- SHA512 5655fa3f246b20c8309d77366fec98835509539ddc390c2746836898ebb8c82ff8331b52e022c3b1d2692c6504ad2e0586c316c7746572146b44375ac97ce4bf
- SSDEEP 12288:jVer5+nZoyeLMA1tmer5+nIwaJNmozer5+nsoN:jxPAPJmta
- TLSH T16235A113E3818AD5D7990932DE6481A0532AF02D6BFB16727A4C12CCDE57387BF65A3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_4d6221acb4a6f3ade841c6d1b9ed45de_elex_icedid_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_4d6221acb4a6f3ade841c6d1b9ed45de_elex_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_4d6221acb4a6f3ade841c6d1b9ed45de_elex_icedid_njrat
- Size 1.0MB
- SHA256 f4a5b3e2ab1bd5c474a112d8c11130f6f9a1d51462670540eb90951f2317952a
- MD5 4d6221acb4a6f3ade841c6d1b9ed45de
- SHA1 19fe194d125e7412310196e7f4c87eb7b9dc90af
- SHA512 5655fa3f246b20c8309d77366fec98835509539ddc390c2746836898ebb8c82ff8331b52e022c3b1d2692c6504ad2e0586c316c7746572146b44375ac97ce4bf
- SSDEEP 12288:jVer5+nZoyeLMA1tmer5+nIwaJNmozer5+nsoN:jxPAPJmta
- TLSH T16235A113E3818AD5D7990932DE6481A0532AF02D6BFB16727A4C12CCDE57387BF65A3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
Drops file in System32 directory