General
- Target 2026-08-17_bbd4042760f7d2a53c3a7a08d25d5b14_icedid_njrat_vidar
- Size 4.7MB
- Sample260817-fb13aatbpf
- SHA256 285404a2d03f560a97fbfbaffd2d24266edd02ebc0497a8961def635543c192a
- MD5 bbd4042760f7d2a53c3a7a08d25d5b14
- SHA1 cb3d14318102f0d51385014b33d8083c0071b8c7
- SHA512 684020b12535979c21edbaacab7c97022716834fd9701459745e7d601fc69f46b37def4bae88800b9c52a236403cd18f0213fa70071990cd047e17a05271156f
- SSDEEP 49152:gdRba8fD8qinfMSKJXIUQREV1QOTu1U5ai2xzYo5UC9RhuCTFKlaxV5dgbT7WrTW:L/IJsiCxsop7cTqrYOm
- TLSH T174366C656BF880F5E1A7E134897AC9B2F77678020D71EB5F0251CA1F2F33A904D29726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_bbd4042760f7d2a53c3a7a08d25d5b14_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_bbd4042760f7d2a53c3a7a08d25d5b14_icedid_njrat_vidar
- Size 4.7MB
- SHA256 285404a2d03f560a97fbfbaffd2d24266edd02ebc0497a8961def635543c192a
- MD5 bbd4042760f7d2a53c3a7a08d25d5b14
- SHA1 cb3d14318102f0d51385014b33d8083c0071b8c7
- SHA512 684020b12535979c21edbaacab7c97022716834fd9701459745e7d601fc69f46b37def4bae88800b9c52a236403cd18f0213fa70071990cd047e17a05271156f
- SSDEEP 49152:gdRba8fD8qinfMSKJXIUQREV1QOTu1U5ai2xzYo5UC9RhuCTFKlaxV5dgbT7WrTW:L/IJsiCxsop7cTqrYOm
- TLSH T174366C656BF880F5E1A7E134897AC9B2F77678020D71EB5F0251CA1F2F33A904D29726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory