General
- Target 2026-07-28_7e01dbe4d77903d7c0d22992a56826c1_elex_icedid_njrat
- Size 1.0MB
- Sample260728-vpr4vsstgt
- SHA256 8b30cada9fbb381c0bcf2abc7836e9a13dd858217008b46bb72c1482e51d85e4
- MD5 7e01dbe4d77903d7c0d22992a56826c1
- SHA1 61eb03a9211d83fa995cda4a976a8936386f8aaa
- SHA512 b4562523b2fb0e5dc2a9bb69a5eb7c922c7b7ead9fae48e4d84e1a9af56c940704972e0c767be172b6ce4e058d3d1484c6768325e59a322ac1f3a687091ff4e5
- SSDEEP 12288:jVer5+nZoyeLMA1tmer5+nIwaJNmozer5+nsoA:jxPAPJmth
- TLSH T11E35A113E3818AD5D7990932DE6481A0532AF02D6BFB16727A4C12CCDE57387BF65A3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_7e01dbe4d77903d7c0d22992a56826c1_elex_icedid_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_7e01dbe4d77903d7c0d22992a56826c1_elex_icedid_njrat.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_7e01dbe4d77903d7c0d22992a56826c1_elex_icedid_njrat
- Size 1.0MB
- SHA256 8b30cada9fbb381c0bcf2abc7836e9a13dd858217008b46bb72c1482e51d85e4
- MD5 7e01dbe4d77903d7c0d22992a56826c1
- SHA1 61eb03a9211d83fa995cda4a976a8936386f8aaa
- SHA512 b4562523b2fb0e5dc2a9bb69a5eb7c922c7b7ead9fae48e4d84e1a9af56c940704972e0c767be172b6ce4e058d3d1484c6768325e59a322ac1f3a687091ff4e5
- SSDEEP 12288:jVer5+nZoyeLMA1tmer5+nIwaJNmozer5+nsoA:jxPAPJmth
- TLSH T11E35A113E3818AD5D7990932DE6481A0532AF02D6BFB16727A4C12CCDE57387BF65A3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory