General
- Target 2026-08-16_7f97f3e821f6cd543c853ed07b037ad1_icedid_mespinoza_njrat
- Size 21.4MB
- Sample260816-h77k2sfl2t
- SHA256 8b9af7e7a1c9a57f4e61c73f577e0331020a1dd670ff52d0cc38c5bab20606ef
- MD5 7f97f3e821f6cd543c853ed07b037ad1
- SHA1 96895403885dd875b5fb14e181236864eb24cdd5
- SHA512 8b6a9e30e3f21972c552b9d5484b93bed9cf44fabfdcc80c505c4ceb42d53d24f682ba9720722cbd8846d62daef2a1f873f090427125afafb6df1e306ecfdf7b
- SSDEEP 196608:v9FHcAh1rd6w4x1KyYX/3gB6ruHYk4NzYQCGBSYELDq:v91cUrd69x1E4BquHYDzFELDq
- TLSH T196375B27A6F0C48CEC27D0F4BA06BF939572F4279B3928C7799E9CA45CA4CD55978302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_7f97f3e821f6cd543c853ed07b037ad1_icedid_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_7f97f3e821f6cd543c853ed07b037ad1_icedid_mespinoza_njrat.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_7f97f3e821f6cd543c853ed07b037ad1_icedid_mespinoza_njrat
- Size 21.4MB
- SHA256 8b9af7e7a1c9a57f4e61c73f577e0331020a1dd670ff52d0cc38c5bab20606ef
- MD5 7f97f3e821f6cd543c853ed07b037ad1
- SHA1 96895403885dd875b5fb14e181236864eb24cdd5
- SHA512 8b6a9e30e3f21972c552b9d5484b93bed9cf44fabfdcc80c505c4ceb42d53d24f682ba9720722cbd8846d62daef2a1f873f090427125afafb6df1e306ecfdf7b
- SSDEEP 196608:v9FHcAh1rd6w4x1KyYX/3gB6ruHYk4NzYQCGBSYELDq:v91cUrd69x1E4BquHYDzFELDq
- TLSH T196375B27A6F0C48CEC27D0F4BA06BF939572F4279B3928C7799E9CA45CA4CD55978302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks whether UAC is enabled