General
- Target 2026-07-23_f1c569455ac809d2036bb2bb97d17e34_elex_icedid_njrat
- Size 1.0MB
- Sample260723-bdvwtstwhs
- SHA256 6c364b36db75af10cbc28edfb221646221eda648089871e9b0219ffe0cb38dff
- MD5 f1c569455ac809d2036bb2bb97d17e34
- SHA1 5e2ffce93dd7b1f5e07e973c36262b82c84236b1
- SHA512 300fc3d9b877f355673468b23b448ac4280a3a2587498336633664cb4f8515cdf2a31b83fdf749b18175d38beccd78e7bc782b2a01501c76ce809e00d520a96b
- SSDEEP 12288:jVer5+nZoyeLMA1tmer5+nIwaJNmozer5+nsoR:jxPAPJmtA
- TLSH T14F35A113E3818AD5D7990932DE6481A0532AF02D6BFB16727A4C12CCDE57387BF65A3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_f1c569455ac809d2036bb2bb97d17e34_elex_icedid_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_f1c569455ac809d2036bb2bb97d17e34_elex_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_f1c569455ac809d2036bb2bb97d17e34_elex_icedid_njrat
- Size 1.0MB
- SHA256 6c364b36db75af10cbc28edfb221646221eda648089871e9b0219ffe0cb38dff
- MD5 f1c569455ac809d2036bb2bb97d17e34
- SHA1 5e2ffce93dd7b1f5e07e973c36262b82c84236b1
- SHA512 300fc3d9b877f355673468b23b448ac4280a3a2587498336633664cb4f8515cdf2a31b83fdf749b18175d38beccd78e7bc782b2a01501c76ce809e00d520a96b
- SSDEEP 12288:jVer5+nZoyeLMA1tmer5+nIwaJNmozer5+nsoR:jxPAPJmtA
- TLSH T14F35A113E3818AD5D7990932DE6481A0532AF02D6BFB16727A4C12CCDE57387BF65A3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory