General
- Target 2026-08-14_06826ca82282c6f733f5ebab0b6af053_icedid_njrat_stealc
- Size 1.9MB
- Sample260814-m2lhvaak2s
- SHA256 d582fa169051891e53f8c8066cd7fdbc320fff751d06537df1f649a3f585425b
- MD5 06826ca82282c6f733f5ebab0b6af053
- SHA1 b3087f1375e23c06ebe25631042cff7062dbcb90
- SHA512 0dad62176a75826fe40305d1ca18ca470fd62cbe19c923166b9a4409c00161bba4f33422eafeebb67f3d4822c4bd888424879f3cb2ad4466b12ca3ace8f16f02
- SSDEEP 49152:G03bRTzgORAg92pjyf2rzGshgwsh+ThgMXCT:hbRTTngZBgw3ut
- TLSH T1CC956D2BA26921B8D4BFD1B9C9165907EBF37C0543A0D6CF02E056A62B67BF0473E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_06826ca82282c6f733f5ebab0b6af053_icedid_njrat_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_06826ca82282c6f733f5ebab0b6af053_icedid_njrat_stealc.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_06826ca82282c6f733f5ebab0b6af053_icedid_njrat_stealc
- Size 1.9MB
- SHA256 d582fa169051891e53f8c8066cd7fdbc320fff751d06537df1f649a3f585425b
- MD5 06826ca82282c6f733f5ebab0b6af053
- SHA1 b3087f1375e23c06ebe25631042cff7062dbcb90
- SHA512 0dad62176a75826fe40305d1ca18ca470fd62cbe19c923166b9a4409c00161bba4f33422eafeebb67f3d4822c4bd888424879f3cb2ad4466b12ca3ace8f16f02
- SSDEEP 49152:G03bRTzgORAg92pjyf2rzGshgwsh+ThgMXCT:hbRTTngZBgw3ut
- TLSH T1CC956D2BA26921B8D4BFD1B9C9165907EBF37C0543A0D6CF02E056A62B67BF0473E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.