General
- Target 2026-08-13_8eff11c3b048565511a216185320fd7f_icedid_njrat_stealc
- Size 1.9MB
- Sample260813-t5lfkstgrg
- SHA256 589eb6ea48ce921d961a9dcdd3effc66e2bd15fd76d4b854b832a66c263beace
- MD5 8eff11c3b048565511a216185320fd7f
- SHA1 1d40a943391628f5b07402a9ec282a93469a3f5b
- SHA512 4448b1ba90b22e700be0e04236de466877112b578611aea4ce7a6e5e846676bb08ed53af6d6435ea8a4119e129b19d0077dcacfd86890e1e3c447051ab50ad17
- SSDEEP 49152:C03bRTzgORAg92pjyf2rzGshgwsh+ThFwut4:1bRTTngZBgw3Xy
- TLSH T1A5957D1FA26906BCF5BFD178C956590BEBF1780543A096CF02E097A62B67BE0463F311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_8eff11c3b048565511a216185320fd7f_icedid_njrat_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_8eff11c3b048565511a216185320fd7f_icedid_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_8eff11c3b048565511a216185320fd7f_icedid_njrat_stealc
- Size 1.9MB
- SHA256 589eb6ea48ce921d961a9dcdd3effc66e2bd15fd76d4b854b832a66c263beace
- MD5 8eff11c3b048565511a216185320fd7f
- SHA1 1d40a943391628f5b07402a9ec282a93469a3f5b
- SHA512 4448b1ba90b22e700be0e04236de466877112b578611aea4ce7a6e5e846676bb08ed53af6d6435ea8a4119e129b19d0077dcacfd86890e1e3c447051ab50ad17
- SSDEEP 49152:C03bRTzgORAg92pjyf2rzGshgwsh+ThFwut4:1bRTTngZBgw3Xy
- TLSH T1A5957D1FA26906BCF5BFD178C956590BEBF1780543A096CF02E097A62B67BE0463F311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.