General
- Target 2026-08-13_ec765a3357860fbd0189c6768d61f509_icedid_njrat_vidar
- Size 653KB
- Sample260813-jprmjshe74
- SHA256 3f4a57f7733cb3d7013cca09a3b34238f9f7d0e52e57bca8d29a473fe9dbae86
- MD5 ec765a3357860fbd0189c6768d61f509
- SHA1 a7d6ed59aaeed40c5391fbd4d1d4b2e1caceded4
- SHA512 f62a23f4ba6f17631eb22df7448a57eef7a6f368eb713bb1319432f145037647e82663694ba1d6f33d15c1aa08732b16433d8546f35c31d5dc0f0b689360c24e
- SSDEEP 12288:4eYnAlSAgUu3c3PA+mPVi3pPuhrPGKuyYol:6CSAE3c3PA+mPVi3pPuhrPcJ4
- TLSH T122E46B59279895C3C13BC23DC9964BB9D9613C218721DACB01D976AE3F336E81E3B724
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_ec765a3357860fbd0189c6768d61f509_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_ec765a3357860fbd0189c6768d61f509_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_ec765a3357860fbd0189c6768d61f509_icedid_njrat_vidar
- Size 653KB
- SHA256 3f4a57f7733cb3d7013cca09a3b34238f9f7d0e52e57bca8d29a473fe9dbae86
- MD5 ec765a3357860fbd0189c6768d61f509
- SHA1 a7d6ed59aaeed40c5391fbd4d1d4b2e1caceded4
- SHA512 f62a23f4ba6f17631eb22df7448a57eef7a6f368eb713bb1319432f145037647e82663694ba1d6f33d15c1aa08732b16433d8546f35c31d5dc0f0b689360c24e
- SSDEEP 12288:4eYnAlSAgUu3c3PA+mPVi3pPuhrPGKuyYol:6CSAE3c3PA+mPVi3pPuhrPcJ4
- TLSH T122E46B59279895C3C13BC23DC9964BB9D9613C218721DACB01D976AE3F336E81E3B724
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.