General
- Target 2026-08-25_981947bb0f00c56c8b48e1b0115b5252_icedid_njrat
- Size 3.3MB
- Sample260826-ty4nksec64
- SHA256 6fe544aa43530e5ed3ea49e3faad33811709c7fe23b53007dbd491a374028a43
- MD5 981947bb0f00c56c8b48e1b0115b5252
- SHA1 21704344469820c5c127174b46574badf0e55c5c
- SHA512 0786405cec510971be9bb9138d46e39db38b303820b41e150e702cdce6ee959f569641a4cc67c42d40f832bf71bf15b0a5451a8e2e7742af5c3ceef24bde91ab
- SSDEEP 49152:BI7NrPxdW86NNWK7mW11/rTck6g6gCHKF22xuPabWM+BrD6Ck4gMRAd9x2vRSL:q75W8qicfcQFjxuPayM2qCk4gbduvcL
- TLSH T13DF533D1FB6E95E9E09146BBE4218B409FB5ADA0D7C01F7EC0C991A9CFE5E448D30D28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_981947bb0f00c56c8b48e1b0115b5252_icedid_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_981947bb0f00c56c8b48e1b0115b5252_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_981947bb0f00c56c8b48e1b0115b5252_icedid_njrat
- Size 3.3MB
- SHA256 6fe544aa43530e5ed3ea49e3faad33811709c7fe23b53007dbd491a374028a43
- MD5 981947bb0f00c56c8b48e1b0115b5252
- SHA1 21704344469820c5c127174b46574badf0e55c5c
- SHA512 0786405cec510971be9bb9138d46e39db38b303820b41e150e702cdce6ee959f569641a4cc67c42d40f832bf71bf15b0a5451a8e2e7742af5c3ceef24bde91ab
- SSDEEP 49152:BI7NrPxdW86NNWK7mW11/rTck6g6gCHKF22xuPabWM+BrD6Ck4gMRAd9x2vRSL:q75W8qicfcQFjxuPayM2qCk4gbduvcL
- TLSH T13DF533D1FB6E95E9E09146BBE4218B409FB5ADA0D7C01F7EC0C991A9CFE5E448D30D28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Suspicious use of SetThreadContext