General
- Target 2026-07-31_1959c7c5b2d68bbe759a980148a0e47c_icedid_njrat_vidar
- Size 4.7MB
- Sample260731-1tlqjasbme
- SHA256 20a771a3d9e6825553b1fd5203905653153677840eb532c1c24a0f9e02563189
- MD5 1959c7c5b2d68bbe759a980148a0e47c
- SHA1 9873c23cafede22d65c254ae7fa368c571496442
- SHA512 03571a6e6924386c35726f0d6c0dbab41ffd8509287a56f103b348fc31a5552c07193804568dc7236af73e3b0bfcf1977154dd1cf1403f587021a1562bf6b070
- SSDEEP 49152:mdRba8fD8qinfMSKJXIUQREV1QOTu1U5ai2fzYo5UC9RhuCTFKlaxV5dgbT47Jcv:5/IJsiCfsop7cTmPdwi3Q
- TLSH T1CC366C656BF880F5E1A7E134897AC9B2F77678020D71EB5F0251CA1F2F33A904D29726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_1959c7c5b2d68bbe759a980148a0e47c_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_1959c7c5b2d68bbe759a980148a0e47c_icedid_njrat_vidar
- Size 4.7MB
- SHA256 20a771a3d9e6825553b1fd5203905653153677840eb532c1c24a0f9e02563189
- MD5 1959c7c5b2d68bbe759a980148a0e47c
- SHA1 9873c23cafede22d65c254ae7fa368c571496442
- SHA512 03571a6e6924386c35726f0d6c0dbab41ffd8509287a56f103b348fc31a5552c07193804568dc7236af73e3b0bfcf1977154dd1cf1403f587021a1562bf6b070
- SSDEEP 49152:mdRba8fD8qinfMSKJXIUQREV1QOTu1U5ai2fzYo5UC9RhuCTFKlaxV5dgbT47Jcv:5/IJsiCfsop7cTmPdwi3Q
- TLSH T1CC366C656BF880F5E1A7E134897AC9B2F77678020D71EB5F0251CA1F2F33A904D29726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory