General
- Target 2026-08-20_f6eb22a0040886efb5cd334fdaf43559_cryptbot_elex_icedid_njrat
- Size 3.3MB
- Sample260820-ref23a1zg1
- SHA256 c6fdcd140aaa539f81adca139a0d53dac21ad377cd6deea30c2969030b7c1f03
- MD5 f6eb22a0040886efb5cd334fdaf43559
- SHA1 404c4a700fe970eddb316165929a388cb9a928c8
- SHA512 cd997fcf3518da0559aee573cad804bad309c72bc17858b330593e2e8e1867ac299f81f50736a199ab648d4ba29b02c2c5cec95b73b5afdbf0ee1fc778ccc33e
- SSDEEP 98304:oBfKbdeOBfKiIOVmT6EPAmQvw3sYXYdhTDwrskWo:bbd+iIzhQLThwp
- TLSH T17BF5235EB36184F5DA638638CCA2450AE7767CE20B70DA5F0BE5A6173F333505E2A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_f6eb22a0040886efb5cd334fdaf43559_cryptbot_elex_icedid_njrat.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_f6eb22a0040886efb5cd334fdaf43559_cryptbot_elex_icedid_njrat.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_f6eb22a0040886efb5cd334fdaf43559_cryptbot_elex_icedid_njrat
- Size 3.3MB
- SHA256 c6fdcd140aaa539f81adca139a0d53dac21ad377cd6deea30c2969030b7c1f03
- MD5 f6eb22a0040886efb5cd334fdaf43559
- SHA1 404c4a700fe970eddb316165929a388cb9a928c8
- SHA512 cd997fcf3518da0559aee573cad804bad309c72bc17858b330593e2e8e1867ac299f81f50736a199ab648d4ba29b02c2c5cec95b73b5afdbf0ee1fc778ccc33e
- SSDEEP 98304:oBfKbdeOBfKiIOVmT6EPAmQvw3sYXYdhTDwrskWo:bbd+iIzhQLThwp
- TLSH T17BF5235EB36184F5DA638638CCA2450AE7767CE20B70DA5F0BE5A6173F333505E2A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application