362b536a004bdebd07502c1aec4e123e1d69b7e57f51353a0ce4f102a7aab74c | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-08-03...ar.exe

windows10-2004-x64

7

2026-08-03...ar.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_639bf91a8f88d01fb1e173dcf64a6e01_icedid_njrat_vidar
Size 829KB
Sample260803-c3q5lsbb38
SHA256 362b536a004bdebd07502c1aec4e123e1d69b7e57f51353a0ce4f102a7aab74c
MD5 639bf91a8f88d01fb1e173dcf64a6e01
SHA1 0938e70b18b2ad535403e1e1a08eafac1db160b8
SHA512 ec5d9b9fd7e7e1026ef1c0397437f5dc4b223e277f399e0d83827332348fc35562948b0c40b831469590b08bd723d508d24237d92640d24ca318cab16357a0c4
SSDEEP 12288:6mw5HEjsChNXBFgl0W8m+CeOpagJNmT3GLuqWPMrZNfMi3osu+KGRPwcd3ATzBE3:TwuuOWCOpayI7qWwfMaCGRdd3aEHX
TLSH
T1D205024677A51CF9EAB65179C697C136E7F2B8022621CB0F1360C65B5F33361AD2EB20
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery ransomware spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-08-03_639bf91a8f88d01fb1e173dcf64a6e01_icedid_njrat_vidar.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

14 signatures

150 seconds

discovery ransomware spyware stealer

Behavioral task

behavioral2

Sample

2026-08-03_639bf91a8f88d01fb1e173dcf64a6e01_icedid_njrat_vidar.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

spyware stealer

Malware Config

Targets

- Target
  2026-08-03_639bf91a8f88d01fb1e173dcf64a6e01_icedid_njrat_vidar
- Size 829KB
- SHA256 362b536a004bdebd07502c1aec4e123e1d69b7e57f51353a0ce4f102a7aab74c
- MD5 639bf91a8f88d01fb1e173dcf64a6e01
- SHA1 0938e70b18b2ad535403e1e1a08eafac1db160b8
- SHA512 ec5d9b9fd7e7e1026ef1c0397437f5dc4b223e277f399e0d83827332348fc35562948b0c40b831469590b08bd723d508d24237d92640d24ca318cab16357a0c4
- SSDEEP 12288:6mw5HEjsChNXBFgl0W8m+CeOpagJNmT3GLuqWPMrZNfMi3osu+KGRPwcd3ATzBE3:TwuuOWCOpayI7qWwfMaCGRdd3aEHX
- TLSH
  T1D205024677A51CF9EAB65179C697C136E7F2B8022621CB0F1360C65B5F33361AD2EB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery ransomware spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomwarespywarestealer

behavioral2

© 2018-2026

Terms | Privacy