Analysis
- max time kernel
150s - max time network
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
31/07/2026, 12:01
General
- Target 2026-07-31_451b0f50b69c5ebd322470f051d466c3_icedid_njrat_remcos_vidar.exe
- Size 19.2MB
- Sample260731-n7bfhaaa73
- SHA256 49472992862a5873144e97a703079b3c78a3fecbfca16e51c34a294de8d7bd22
Score
5/10
Malware Config
Signatures
- Drops file in System32 directory 3 IoCs
- Drops file in Windows directory 1 IoCs
- Modifies Control Panel 1 IoCs
- Suspicious behavior: LoadsDriver 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-31_451b0f50b69c5ebd322470f051d466c3_icedid_njrat_remcos_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-31_451b0f50b69c5ebd322470f051d466c3_icedid_njrat_remcos_vidar.exe"1⤵
- Drops file in System32 directory
- Drops file in Windows directory
- Modifies Control Panel
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4680-0-0x00000000007D0000-0x0000000000830000-memory.dmp
memory/4680-6-0x00000000007D0000-0x0000000000830000-memory.dmp
memory/4680-13-0x0000000140000000-0x0000000141348000-memory.dmp
memory/4680-12-0x00000000007D0000-0x0000000000830000-memory.dmp
memory/4680-14-0x0000000140000000-0x0000000141348000-memory.dmp