General
- Target 2026-07-23_1bdfea1cdb174d0ed9d92b078937d2c8_elex_icedid_njrat_swisyn_vidar
- Size 642KB
- Sample260723-bsqknayfpe
- SHA256 e1952c52e3dd04a7a2a0260f2bf72aaff5d5b14b92b88c274040baca01c547da
- MD5 1bdfea1cdb174d0ed9d92b078937d2c8
- SHA1 18bc704ab8e1268a4f0f02b06f63d33e8dec69f3
- SHA512 3ff5d2bce4484849a0f043f530e673b89c6bf24f61c6572482fb85e1ed3420338a79c3f0ea1749824ae68d20cb0650a7baf9d6bb6e3e0a9b12c3886fc17bd058
- SSDEEP 12288:cFUNDa6G3Cw7ZI/jvZmHkWaGAVFurja+bN4hPW6dMAjhBS3:cFOa6Oh7K7vZmHkWaGAVFJKN8O6dBO
- TLSH T178E48D5677A04AB9E177D67989624A15F9727C160B30EA0F03A4537A0F333537AFA323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_1bdfea1cdb174d0ed9d92b078937d2c8_elex_icedid_njrat_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_1bdfea1cdb174d0ed9d92b078937d2c8_elex_icedid_njrat_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_1bdfea1cdb174d0ed9d92b078937d2c8_elex_icedid_njrat_swisyn_vidar
- Size 642KB
- SHA256 e1952c52e3dd04a7a2a0260f2bf72aaff5d5b14b92b88c274040baca01c547da
- MD5 1bdfea1cdb174d0ed9d92b078937d2c8
- SHA1 18bc704ab8e1268a4f0f02b06f63d33e8dec69f3
- SHA512 3ff5d2bce4484849a0f043f530e673b89c6bf24f61c6572482fb85e1ed3420338a79c3f0ea1749824ae68d20cb0650a7baf9d6bb6e3e0a9b12c3886fc17bd058
- SSDEEP 12288:cFUNDa6G3Cw7ZI/jvZmHkWaGAVFurja+bN4hPW6dMAjhBS3:cFOa6Oh7K7vZmHkWaGAVFJKN8O6dBO
- TLSH T178E48D5677A04AB9E177D67989624A15F9727C160B30EA0F03A4537A0F333537AFA323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory