General
- Target 2026-08-10_8dd44bf71b19f555b59a20c7689bb313_amadey_elex_icedid_njrat_vidar
- Size 3.0MB
- Sample260810-ytldnaxckf
- SHA256 a045b349b09ddd3300b2307e68a837c04766fe419260a49e384385aed9fb5195
- MD5 8dd44bf71b19f555b59a20c7689bb313
- SHA1 704a1c2d8dbf548e373a9b6fcd2580073b2f6d43
- SHA512 c7cd52d87448a5e4fd1bb06bb137eb680f95127e3d8cb989dafb26ebc98a5c14df6e7e7730ba4533a49c5e7d967e39b47ceb4ab94b7d8e0b052aa631744335ee
- SSDEEP 24576:U4lw0lwdYTqMi8CtBd2QHCHmTBW57JVJTt4D7/SAOZi+5v48cKfU0Le5ji0hmxNZ:UzPkqJtb2I8VBXdcxPji0AjZ
- TLSH T140E55C15F6B48371D073C179C9E2A69AEE7234425B30CACB1285976D2F277D2C93A732
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-10_8dd44bf71b19f555b59a20c7689bb313_amadey_elex_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_8dd44bf71b19f555b59a20c7689bb313_amadey_elex_icedid_njrat_vidar
- Size 3.0MB
- SHA256 a045b349b09ddd3300b2307e68a837c04766fe419260a49e384385aed9fb5195
- MD5 8dd44bf71b19f555b59a20c7689bb313
- SHA1 704a1c2d8dbf548e373a9b6fcd2580073b2f6d43
- SHA512 c7cd52d87448a5e4fd1bb06bb137eb680f95127e3d8cb989dafb26ebc98a5c14df6e7e7730ba4533a49c5e7d967e39b47ceb4ab94b7d8e0b052aa631744335ee
- SSDEEP 24576:U4lw0lwdYTqMi8CtBd2QHCHmTBW57JVJTt4D7/SAOZi+5v48cKfU0Le5ji0hmxNZ:UzPkqJtb2I8VBXdcxPji0AjZ
- TLSH T140E55C15F6B48371D073C179C9E2A69AEE7234425B30CACB1285976D2F277D2C93A732
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1