General
- Target 2026-08-03_ea8d2de5dea51578e37875dd98c9dc69_icedid_njrat
- Size 3.3MB
- Sample260803-chv8tszzfz
- SHA256 07f50a3151547a91c34289ef0d49dc58abd183315516c084b0a478562913dc61
- MD5 ea8d2de5dea51578e37875dd98c9dc69
- SHA1 67b3a7a11bbe2cd757393ec48eb2390be52c82ba
- SHA512 c4510dfd9e2b0bb7e02ca9956d60be444a23287faaf9a728b6305500aa3a37a006d00e6c3d0f1427d098d132e8e95df1b1b98469dbb462cb17b04471fd214b29
- SSDEEP 49152:HdEEUOrA5M/vSvwutClYBBwAKe7XdzsiuRln6psc2uGD6+glEilpQJSPYG:GltnDO3tylEiln
- TLSH T123F59E5A77A841F8D177D17C8A468A46F6B1740A5F3197CF12A4839E2F33AE04E7E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_ea8d2de5dea51578e37875dd98c9dc69_icedid_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_ea8d2de5dea51578e37875dd98c9dc69_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_ea8d2de5dea51578e37875dd98c9dc69_icedid_njrat
- Size 3.3MB
- SHA256 07f50a3151547a91c34289ef0d49dc58abd183315516c084b0a478562913dc61
- MD5 ea8d2de5dea51578e37875dd98c9dc69
- SHA1 67b3a7a11bbe2cd757393ec48eb2390be52c82ba
- SHA512 c4510dfd9e2b0bb7e02ca9956d60be444a23287faaf9a728b6305500aa3a37a006d00e6c3d0f1427d098d132e8e95df1b1b98469dbb462cb17b04471fd214b29
- SSDEEP 49152:HdEEUOrA5M/vSvwutClYBBwAKe7XdzsiuRln6psc2uGD6+glEilpQJSPYG:GltnDO3tylEiln
- TLSH T123F59E5A77A841F8D177D17C8A468A46F6B1740A5F3197CF12A4839E2F33AE04E7E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Drops file in System32 directory