General
- Target 2026-08-10_48afcaeb69614bc9678614d615ad8772_elex_icedid_njrat
- Size 1.0MB
- Sample260810-2kascabj5z
- SHA256 7ec9b170a25b0014160514263cfa9c8c6883ce053fb9baaffc4fd70e6cf91711
- MD5 48afcaeb69614bc9678614d615ad8772
- SHA1 9b0e71fd097a3d0e42cae75b6298135c16879da3
- SHA512 c84f1baeb9cc6cf9fa6d4a9fd17db94ce253fd66ba110111aa602f157f22948ac8449019b3e3b78a2c399af12f6e595f99697b43ca8837cd9c11d3a5d3b5a39b
- SSDEEP 12288:jVer5+nZoyeLMA1tmer5+nIwaJNmozer5+nsoN:jxPAPJmt+
- TLSH T1E235A113E3818AD5D7990932DE6481A0532AF02D6BFB16727A4C12CCDE57387BF65A3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_48afcaeb69614bc9678614d615ad8772_elex_icedid_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_48afcaeb69614bc9678614d615ad8772_elex_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_48afcaeb69614bc9678614d615ad8772_elex_icedid_njrat
- Size 1.0MB
- SHA256 7ec9b170a25b0014160514263cfa9c8c6883ce053fb9baaffc4fd70e6cf91711
- MD5 48afcaeb69614bc9678614d615ad8772
- SHA1 9b0e71fd097a3d0e42cae75b6298135c16879da3
- SHA512 c84f1baeb9cc6cf9fa6d4a9fd17db94ce253fd66ba110111aa602f157f22948ac8449019b3e3b78a2c399af12f6e595f99697b43ca8837cd9c11d3a5d3b5a39b
- SSDEEP 12288:jVer5+nZoyeLMA1tmer5+nIwaJNmozer5+nsoN:jxPAPJmt+
- TLSH T1E235A113E3818AD5D7990932DE6481A0532AF02D6BFB16727A4C12CCDE57387BF65A3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory