General
- Target 2026-07-23_0f7ec716ccb8425b8e1d91e93c325585_elex_icedid_njrat_swisyn_vidar
- Size 565KB
- Sample260723-ncakqacc65
- SHA256 abbd549bd91fbebfa90e7ebac273f5a1dea13eafbbea74d3f8ff5ee8f04202a2
- MD5 0f7ec716ccb8425b8e1d91e93c325585
- SHA1 8fea647d48ea66a08a5764fdea7ba6246eab6f69
- SHA512 f6a20b420d9678951a8a4b67bf815b1a8759b5b71b8b3f08ef86c3d0c238274f934fa4a7244a09a36c787c38d9cf089811b527ee465cb76c6d86339e08a0d689
- SSDEEP 12288:cFUNDahJ6+96YEAANpbVuroJF4ujNCg004eIW24HN:cFOar69YzANpbVuroJF46NCg0+
- TLSH T173C48E12B7A008B9D077D278C8A68B15F9723C250B31EA4F13A997551F3371279FAB27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_0f7ec716ccb8425b8e1d91e93c325585_elex_icedid_njrat_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_0f7ec716ccb8425b8e1d91e93c325585_elex_icedid_njrat_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_0f7ec716ccb8425b8e1d91e93c325585_elex_icedid_njrat_swisyn_vidar
- Size 565KB
- SHA256 abbd549bd91fbebfa90e7ebac273f5a1dea13eafbbea74d3f8ff5ee8f04202a2
- MD5 0f7ec716ccb8425b8e1d91e93c325585
- SHA1 8fea647d48ea66a08a5764fdea7ba6246eab6f69
- SHA512 f6a20b420d9678951a8a4b67bf815b1a8759b5b71b8b3f08ef86c3d0c238274f934fa4a7244a09a36c787c38d9cf089811b527ee465cb76c6d86339e08a0d689
- SSDEEP 12288:cFUNDahJ6+96YEAANpbVuroJF4ujNCg004eIW24HN:cFOar69YzANpbVuroJF46NCg0+
- TLSH T173C48E12B7A008B9D077D278C8A68B15F9723C250B31EA4F13A997551F3371279FAB27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory