General
- Target 2026-08-19_e0ffc931e68effcfbc4aff95b482a76f_icedid_njrat
- Size 3.3MB
- Sample260819-1rmj2sw1e1
- SHA256 835c8e9c98803744727743466755542156346ec0e7e18aa2e467c0ba232ff915
- MD5 e0ffc931e68effcfbc4aff95b482a76f
- SHA1 e6556ced834e648f13438142a0185e479b5a8b8a
- SHA512 f0aafe9113a41517156ffc380a7c93eef261d1ed2a47d41cf9624b6d7d068200a6b3d15e8d4bd37810ff80c9b0fab2805dd18010c4d7842a61c414322242067b
- SSDEEP 49152:SWTT5Y2hS8mXx6Jdkf3CuSzEyq2JyJfT9lD52jU:v0x6JGy74Z2Qbo
- TLSH T182F5332BF643ABEDED152E328813BA416B3766B35B216D3F5500147ABC441C4EE36F4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_e0ffc931e68effcfbc4aff95b482a76f_icedid_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_e0ffc931e68effcfbc4aff95b482a76f_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_e0ffc931e68effcfbc4aff95b482a76f_icedid_njrat
- Size 3.3MB
- SHA256 835c8e9c98803744727743466755542156346ec0e7e18aa2e467c0ba232ff915
- MD5 e0ffc931e68effcfbc4aff95b482a76f
- SHA1 e6556ced834e648f13438142a0185e479b5a8b8a
- SHA512 f0aafe9113a41517156ffc380a7c93eef261d1ed2a47d41cf9624b6d7d068200a6b3d15e8d4bd37810ff80c9b0fab2805dd18010c4d7842a61c414322242067b
- SSDEEP 49152:SWTT5Y2hS8mXx6Jdkf3CuSzEyq2JyJfT9lD52jU:v0x6JGy74Z2Qbo
- TLSH T182F5332BF643ABEDED152E328813BA416B3766B35B216D3F5500147ABC441C4EE36F4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Suspicious use of SetThreadContext