General
- Target 2026-07-23_1eb4684e7df7ab4c043a41d65f6ca558_elex_icedid_njrat_swisyn_vidar
- Size 564KB
- Sample260723-bsnfaseg79
- SHA256 9efc18f719e8f4e03962c8c8a8d086a54149864a0a9fdf4b200f9298e207b56a
- MD5 1eb4684e7df7ab4c043a41d65f6ca558
- SHA1 429d8d87f3172ca7ccb120331aa9f51355b9fd07
- SHA512 c71ffa5328fcc40f2ffd5ffc4d1146a0502bd3f4258c23b32a6525e50f6d37ae187c028a0f50e19d0f792de255ba435a517d03ff948240b619667ecf0f58a836
- SSDEEP 12288:cFUNDakhyJ+XvnsG0Z3v/dcMaYQ7qD6Pd1:cFOaWTfnsG0Z3v/dcMaYQeD6V1
- TLSH T12FC48D1677A008B9D077D179C8A18B16FA727C160B30EB4F13A993591F3335279BAB27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_1eb4684e7df7ab4c043a41d65f6ca558_elex_icedid_njrat_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_1eb4684e7df7ab4c043a41d65f6ca558_elex_icedid_njrat_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_1eb4684e7df7ab4c043a41d65f6ca558_elex_icedid_njrat_swisyn_vidar
- Size 564KB
- SHA256 9efc18f719e8f4e03962c8c8a8d086a54149864a0a9fdf4b200f9298e207b56a
- MD5 1eb4684e7df7ab4c043a41d65f6ca558
- SHA1 429d8d87f3172ca7ccb120331aa9f51355b9fd07
- SHA512 c71ffa5328fcc40f2ffd5ffc4d1146a0502bd3f4258c23b32a6525e50f6d37ae187c028a0f50e19d0f792de255ba435a517d03ff948240b619667ecf0f58a836
- SSDEEP 12288:cFUNDakhyJ+XvnsG0Z3v/dcMaYQ7qD6Pd1:cFOaWTfnsG0Z3v/dcMaYQeD6V1
- TLSH T12FC48D1677A008B9D077D179C8A18B16FA727C160B30EB4F13A993591F3335279BAB27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory