2026-08-16_c3f1766e7876beb97b5cfc6c23f9d294_elex_icedid_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-16_c3f1766e7876beb97b5cfc6c23f9d294_elex_icedid_njrat
Size 1.0MB
Sample260817-asfvsagf67
SHA256 63f78cc19f8aeace510ca3aecdd93591821b3cbf8a2e39d2e9d6e80f9d16b7f8
MD5 c3f1766e7876beb97b5cfc6c23f9d294
SHA1 f4353eb060a2bfc1c3340b5476339267c8ccc851
SHA512 b5da4236e9f116f86ea927bc4172f6027e66bc1c74bd6b1ff28f4806c948c0f9c6d9820eeae092ae08713dbab7551ac874ccd0b14bfc82dcb34e71285b8e29e8
SSDEEP 12288:jVer5+nZoyeLMA1tmer5+nIwaJNmozer5+nso+:jxPAPJmtL
TLSH
T10F35A117E3818AD5D7990932DE6481A0532AF02D6BFB16723A4C12C8DE57387BF65E3C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-16_c3f1766e7876beb97b5cfc6c23f9d294_elex_icedid_njrat

File Explorer

2026-08-16_c3f1766e7876beb97b5cfc6c23f9d294_elex_icedid_njrat

.exe 1.0MB

2026-08-16_c3f1766e7876beb97b5cfc6c23f9d294_elex_icedid_njrat

IMPHASH 84a5c39eb178b6e678403c890a52017c
SHA256 63f78cc19f8aeace510ca3aecdd93591821b3cbf8a2e39d2e9d6e80f9d16b7f8
MD5 c3f1766e7876beb97b5cfc6c23f9d294
SHA1 f4353eb060a2bfc1c3340b5476339267c8ccc851
SHA512 b5da4236e9f116f86ea927bc4172f6027e66bc1c74bd6b1ff28f4806c948c0f9c6d9820eeae092ae08713dbab7551ac874ccd0b14bfc82dcb34e71285b8e29e8
SSDEEP 12288:jVer5+nZoyeLMA1tmer5+nIwaJNmozer5+nso+:jxPAPJmtL
TLSH
T10F35A117E3818AD5D7990932DE6481A0532AF02D6BFB16723A4C12C8DE57387BF65E3C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

crtdll

memset strlen _strnicmp strncmp strncpy strcpy atof strcat localtime mktime gmtime

user32

wsprintfA GetWindowThreadProcessId KillTimer SetTimer wvsprintfA MessageBoxA IsWindowVisible IsWindowEnabled GetForegroundWindow EnableWindow EnumWindows GetWindowLongA CallWindowProcA DefWindowProcA SetWindowLongA SetWindowTextA DestroyWindow SendMessageA CreateWindowExA LoadCursorA LoadIconA RegisterClassA GetSysColor PeekMessageA GetActiveWindow TranslateAcceleratorA TranslateMessage DispatchMessageA AdjustWindowRect GetSystemMetrics GetWindowRect ShowWindow GetMessageA GetClassNameA PostMessageA GetParent GetWindow SetWindowPos SetFocus SetActiveWindow UnregisterClassA DestroyAcceleratorTable GetFocus IsChild EnumChildWindows GetKeyState CreateAcceleratorTableA SetCursorPos LoadImageA SetCursor SystemParametersInfoA SetCapture GetCursorPos MapWindowPoints ReleaseCapture MoveWindow

advapi32

RegCreateKeyA RegSetValueExA RegCloseKey

wininet

InternetOpenA InternetOpenUrlA InternetReadFile InternetCloseHandle

oleaut32

SysAllocStringLen SysFreeString SysAllocString

ole32

CoInitialize CoCreateInstance CoUninitialize

urlmon

URLDownloadToFileA

gdi32

GetStockObject CreateBrushIndirect

comctl32

InitCommonControls

kernel32

GetModuleHandleA GetCommandLineA ExitProcess HeapCreate GetSystemDirectoryA GetModuleFileNameA LoadLibraryA GetProcAddress GlobalAlloc OpenProcess CloseHandle GetLastError GetEnvironmentVariableA GetCurrentDirectoryA SystemTimeToFileTime GetFileAttributesA SetFileAttributesA CreateFileA SetFileTime GetFileTime HeapDestroy HeapReAlloc FreeLibrary HeapAlloc IsBadReadPtr HeapFree GlobalFree MultiByteToWideChar WideCharToMultiByte SetUnhandledExceptionFilter GetVersionExA GetCurrentThreadId GetCurrentProcessId WaitForSingleObject GetTickCount Sleep FindClose FindFirstFileA FindNextFileA ReadFile SetFilePointer GetFileSize WriteFile GetLocalTime

shell32

ShellExecuteExA

Name

.text

Size

65KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.flat

Size

1024B

Virtual Size

617B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

lCGgTPbA

Size

116KB

Virtual Size

116KB

Characteristics

Name

fcAVDFvc

Size

2KB

Virtual Size

1KB

Characteristics

Name

fKdcYKgT

Size

2KB

Virtual Size

2KB

Characteristics

Name

fXPdcIaV

Size

34KB

Virtual Size

33KB

Characteristics

Name

OQncvYfO

Size

364KB

Virtual Size

364KB

Characteristics

Name

fxcwDlQh

Size

273KB

Virtual Size

272KB

Characteristics

Name

Mwwvqfrt

Size

4KB

Virtual Size

4KB

Characteristics

Name

BwqrYhpF

Size

48KB

Virtual Size

47KB

Characteristics

Name

bzBuIDJx

Size

2KB

Virtual Size

1KB

Characteristics

Name

lZPaKfZj

Size

103KB

Virtual Size

103KB

Characteristics

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-16_c3f1766e7876beb97b5cfc6c23f9d294_elex_icedid_njrat

crtdll

user32

advapi32

wininet

oleaut32

ole32

urlmon

gdi32

comctl32

kernel32

shell32

generic