General
- Target 2026-07-23_5208cd8d902b48c253133f97e87a20d7_elex_icedid_njrat_swisyn_vidar
- Size 566KB
- Sample260723-bpmplack3v
- SHA256 810e916f7e2d38e78f7997c62dd9262f75a4ebfd44dc3b5c3aae032d49b8d1ba
- MD5 5208cd8d902b48c253133f97e87a20d7
- SHA1 2f935464ddd8366244b413ee53207ef88ecaec2a
- SHA512 92b2aa1ab6eb4d2537a7ee8e819c7aace0645087b64548a670a16cb17e53b9d561b0e4107844a496ed16aabf9aea005ee7476530c54257fcc81fb12ff5411bec
- SSDEEP 12288:cFUNDa9D+k3HVJ5xDfp4D7/SAOZi+5v4+rcKftg:cFOaNJVJTt4D7/SAOZi+5v48cKfq
- TLSH T18AC48D12B7A408F9D177D278C9654B16F9723C164B30EA0F13A993691F333127DBAB26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_5208cd8d902b48c253133f97e87a20d7_elex_icedid_njrat_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_5208cd8d902b48c253133f97e87a20d7_elex_icedid_njrat_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_5208cd8d902b48c253133f97e87a20d7_elex_icedid_njrat_swisyn_vidar
- Size 566KB
- SHA256 810e916f7e2d38e78f7997c62dd9262f75a4ebfd44dc3b5c3aae032d49b8d1ba
- MD5 5208cd8d902b48c253133f97e87a20d7
- SHA1 2f935464ddd8366244b413ee53207ef88ecaec2a
- SHA512 92b2aa1ab6eb4d2537a7ee8e819c7aace0645087b64548a670a16cb17e53b9d561b0e4107844a496ed16aabf9aea005ee7476530c54257fcc81fb12ff5411bec
- SSDEEP 12288:cFUNDa9D+k3HVJ5xDfp4D7/SAOZi+5v4+rcKftg:cFOaNJVJTt4D7/SAOZi+5v48cKfq
- TLSH T18AC48D12B7A408F9D177D278C9654B16F9723C164B30EA0F13A993691F333127DBAB26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory