General
- Target 2026-08-16_3361fdf1a6c72ea8b6f956ab97e2fb40_elex_icedid_njrat_vidar
- Size 1.3MB
- Sample260816-wzcycsvshs
- SHA256 e867864777b16cfcd1dac996bf347c085b6a836b90e0c5574ad8874ea76c6d0d
- MD5 3361fdf1a6c72ea8b6f956ab97e2fb40
- SHA1 2ab508381dabe793358bd38a6304d5a14e34eacc
- SHA512 bd3a8fb1ea74f506cdbba96e661c692f5cda1c21e2d7f6134e7745ddf0dbab5671d7d9129abd67ca5c4cfe3cf1ae22f97cc9f3df4d35f472de9cb6cc36d127bc
- SSDEEP 24576:m9+EM0q9+EM0gLrCn58LgV83LzXYJLKSMCMU0slZOZy:U+ES+E4C58LgVLKRCMcb
- TLSH T183557D0973E515E5F6B3A670887682B2AE76BC201B30C7EF5740A5291F23AD0ED3D716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_3361fdf1a6c72ea8b6f956ab97e2fb40_elex_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_3361fdf1a6c72ea8b6f956ab97e2fb40_elex_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_3361fdf1a6c72ea8b6f956ab97e2fb40_elex_icedid_njrat_vidar
- Size 1.3MB
- SHA256 e867864777b16cfcd1dac996bf347c085b6a836b90e0c5574ad8874ea76c6d0d
- MD5 3361fdf1a6c72ea8b6f956ab97e2fb40
- SHA1 2ab508381dabe793358bd38a6304d5a14e34eacc
- SHA512 bd3a8fb1ea74f506cdbba96e661c692f5cda1c21e2d7f6134e7745ddf0dbab5671d7d9129abd67ca5c4cfe3cf1ae22f97cc9f3df4d35f472de9cb6cc36d127bc
- SSDEEP 24576:m9+EM0q9+EM0gLrCn58LgV83LzXYJLKSMCMU0slZOZy:U+ES+E4C58LgVLKRCMcb
- TLSH T183557D0973E515E5F6B3A670887682B2AE76BC201B30C7EF5740A5291F23AD0ED3D716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1