General
- Target 2026-09-04_86cba7680fbc71c43f401497d8345d4c_icedid_njrat
- Size 891KB
- Sample260905-fa3jqabh48
- SHA256 2953cace5419d08bc091c83379468f602feca466765bcf6fa3686b9dd50be18c
- MD5 86cba7680fbc71c43f401497d8345d4c
- SHA1 efbcc913f91428270618411817533381ae5022d2
- SHA512 f309ae126c94adb6a254f4b141fc538fdd173b979501bdc4d39d4170f47b00b118a323e17e66debccdad7dd22e85ce2e689f6dc81c2f6ee1f2eb8246f7720894
- SSDEEP 24576:cL5INHZrkOJvw1ZByD68SotxfmaXHk9Z:rBZIJyptx1MZ
- TLSH T18B1533D6F26F16CED466B134DD0D977E3AA26C36508C613051B43EE2BB1A9FBACD2500
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-04_86cba7680fbc71c43f401497d8345d4c_icedid_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_86cba7680fbc71c43f401497d8345d4c_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_86cba7680fbc71c43f401497d8345d4c_icedid_njrat
- Size 891KB
- SHA256 2953cace5419d08bc091c83379468f602feca466765bcf6fa3686b9dd50be18c
- MD5 86cba7680fbc71c43f401497d8345d4c
- SHA1 efbcc913f91428270618411817533381ae5022d2
- SHA512 f309ae126c94adb6a254f4b141fc538fdd173b979501bdc4d39d4170f47b00b118a323e17e66debccdad7dd22e85ce2e689f6dc81c2f6ee1f2eb8246f7720894
- SSDEEP 24576:cL5INHZrkOJvw1ZByD68SotxfmaXHk9Z:rBZIJyptx1MZ
- TLSH T18B1533D6F26F16CED466B134DD0D977E3AA26C36508C613051B43EE2BB1A9FBACD2500
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables built or packed with MPress PE compressor
-
Executes dropped EXE