General
- Target 2026-08-19_e5e5bbd39f7b7bf88d8b282565847a88_icedid_njrat_stealc
- Size 4.3MB
- Sample260819-rtpbzsysgy
- SHA256 2ce76b4c78d47bc7afedbabd044f2495ac8af7a47cfb98c3609958435d5d8cf1
- MD5 e5e5bbd39f7b7bf88d8b282565847a88
- SHA1 40daf78df57940e55bca8647cb8c9e69e59458f9
- SHA512 d01070f9384e8ee24cbe6159b5fe12947e8ad172cb9584ca0385ac2b69137e4d476e3e9c9910f742f38de051b76cc1dcfd6f6bedc0ee98afe52fbe56dfd4d2ee
- SSDEEP 98304:1bRTTngZBgw3G5WGoqZ92yVG/uzGNV9HkAVHL/D1:1bRTbYCw3lByQyVG/uzGNVyAl31
- TLSH T1CD26E06BA26901FCD4BFD1B8C9165907EBB1780943A096DF07E056A62F63BE04F3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_e5e5bbd39f7b7bf88d8b282565847a88_icedid_njrat_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_e5e5bbd39f7b7bf88d8b282565847a88_icedid_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_e5e5bbd39f7b7bf88d8b282565847a88_icedid_njrat_stealc
- Size 4.3MB
- SHA256 2ce76b4c78d47bc7afedbabd044f2495ac8af7a47cfb98c3609958435d5d8cf1
- MD5 e5e5bbd39f7b7bf88d8b282565847a88
- SHA1 40daf78df57940e55bca8647cb8c9e69e59458f9
- SHA512 d01070f9384e8ee24cbe6159b5fe12947e8ad172cb9584ca0385ac2b69137e4d476e3e9c9910f742f38de051b76cc1dcfd6f6bedc0ee98afe52fbe56dfd4d2ee
- SSDEEP 98304:1bRTTngZBgw3G5WGoqZ92yVG/uzGNV9HkAVHL/D1:1bRTbYCw3lByQyVG/uzGNVyAl31
- TLSH T1CD26E06BA26901FCD4BFD1B8C9165907EBB1780943A096DF07E056A62F63BE04F3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.