General
- Target 2026-08-08_4503c855d126438de82d0d6541e26385_icedid_njrat_vidar
- Size 938KB
- Sample260808-d9e7cshj9z
- SHA256 b9026fbb01181e14e09b2c2e4f5f378dd9fffc250203be383e34a67972bc5f5f
- MD5 4503c855d126438de82d0d6541e26385
- SHA1 8b698e085a853a3ea6700d35cfd327f420e9cad5
- SHA512 4272d31045a5f5170bb903e279a161a007846554a0bcc3443de2af9687cd21d610169b1227a8576ad892461585a097da48293e3eda27d25fe2f892846727ab09
- SSDEEP 24576:Fi5/Ba7O5rr+xET7Jckdwi6i9bNrqq4E41WFpW3oRos:FSBf5rrmm7Jckdwi3N7+WTW3
- TLSH T1C515F109F3E404F9E5B78138C976C94AE6B17C870770DB9F12A842962F376618D2EF25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_4503c855d126438de82d0d6541e26385_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_4503c855d126438de82d0d6541e26385_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_4503c855d126438de82d0d6541e26385_icedid_njrat_vidar
- Size 938KB
- SHA256 b9026fbb01181e14e09b2c2e4f5f378dd9fffc250203be383e34a67972bc5f5f
- MD5 4503c855d126438de82d0d6541e26385
- SHA1 8b698e085a853a3ea6700d35cfd327f420e9cad5
- SHA512 4272d31045a5f5170bb903e279a161a007846554a0bcc3443de2af9687cd21d610169b1227a8576ad892461585a097da48293e3eda27d25fe2f892846727ab09
- SSDEEP 24576:Fi5/Ba7O5rr+xET7Jckdwi6i9bNrqq4E41WFpW3oRos:FSBf5rrmm7Jckdwi3N7+WTW3
- TLSH T1C515F109F3E404F9E5B78138C976C94AE6B17C870770DB9F12A842962F376618D2EF25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1