General
- Target 2026-08-21_ddb746802b32987d654ae4b368b8d984_icedid_njrat
- Size 3.3MB
- Sample260821-lymfasxekf
- SHA256 2e6e8ac65a3fc0a8194d66440ad73ce321ccd869043f12d5688c8d8c6e413c71
- MD5 ddb746802b32987d654ae4b368b8d984
- SHA1 3f5d81a9cbcaf3880890a8f65297312364925653
- SHA512 f042b3e416cd426935ab6ea9c74dff613ed268c03d9cfab04892da238654e6a3501b61146d99a0014945f35c614affb421684891a3fc5ad866e9a7030c94a3ee
- SSDEEP 49152:s6IqfLtv77e+yJfvSm4U+xdtFg+VFx49qJoXpqlo0kU2WWvtSNsGZ0DQSX7NR:saJ7e+yJfvSVjjmEZ54tSyGCDrNR
- TLSH T17DF53321B29973D4E036173B5C600D4D2A3ED63E136F8D3B0995C5AAEE827AD4D0CF66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_ddb746802b32987d654ae4b368b8d984_icedid_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_ddb746802b32987d654ae4b368b8d984_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_ddb746802b32987d654ae4b368b8d984_icedid_njrat
- Size 3.3MB
- SHA256 2e6e8ac65a3fc0a8194d66440ad73ce321ccd869043f12d5688c8d8c6e413c71
- MD5 ddb746802b32987d654ae4b368b8d984
- SHA1 3f5d81a9cbcaf3880890a8f65297312364925653
- SHA512 f042b3e416cd426935ab6ea9c74dff613ed268c03d9cfab04892da238654e6a3501b61146d99a0014945f35c614affb421684891a3fc5ad866e9a7030c94a3ee
- SSDEEP 49152:s6IqfLtv77e+yJfvSm4U+xdtFg+VFx49qJoXpqlo0kU2WWvtSNsGZ0DQSX7NR:saJ7e+yJfvSVjjmEZ54tSyGCDrNR
- TLSH T17DF53321B29973D4E036173B5C600D4D2A3ED63E136F8D3B0995C5AAEE827AD4D0CF66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Suspicious use of SetThreadContext