General
- Target 2026-08-21_416b9a70238bdedaea5b65f1ae6a1b6f_icedid_njrat_vidar
- Size 825KB
- Sample260821-ccapyat1ax
- SHA256 5ad4771408b549edccd977c774c53c6bc81f1aaad9c51abe88c44e1a6f8d49b4
- MD5 416b9a70238bdedaea5b65f1ae6a1b6f
- SHA1 fc3ebaeec47cb049c4d6cd75591852e920297e4a
- SHA512 ddd35e560e87c823011a71e366bed2409dbe46d57b33b978d7015c93bfc382fdc539224fbc4dbb06bb5df89daa46cc7f612d989fdf78bbe272862f2a6437e65f
- SSDEEP 12288:1mw5HEjsChNYBFgl0W2m+CZ7i2v6Al1bjO/9fxxtvpRpybPAAuFsLz578tHrt5z1:wwuROWnnl1bji9Dlpyr/uKLlmLtpI
- TLSH T16505F146B2A41CF9E5A7623C8657C032F7B2B8112A25DB0F1370C69B6F372516E3DB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_416b9a70238bdedaea5b65f1ae6a1b6f_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_416b9a70238bdedaea5b65f1ae6a1b6f_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_416b9a70238bdedaea5b65f1ae6a1b6f_icedid_njrat_vidar
- Size 825KB
- SHA256 5ad4771408b549edccd977c774c53c6bc81f1aaad9c51abe88c44e1a6f8d49b4
- MD5 416b9a70238bdedaea5b65f1ae6a1b6f
- SHA1 fc3ebaeec47cb049c4d6cd75591852e920297e4a
- SHA512 ddd35e560e87c823011a71e366bed2409dbe46d57b33b978d7015c93bfc382fdc539224fbc4dbb06bb5df89daa46cc7f612d989fdf78bbe272862f2a6437e65f
- SSDEEP 12288:1mw5HEjsChNYBFgl0W2m+CZ7i2v6Al1bjO/9fxxtvpRpybPAAuFsLz578tHrt5z1:wwuROWnnl1bji9Dlpyr/uKLlmLtpI
- TLSH T16505F146B2A41CF9E5A7623C8657C032F7B2B8112A25DB0F1370C69B6F372516E3DB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1