General
- Target 2026-09-04_03fb3172cc90249fce2fffe5622239c5_icedid_njrat_vidar
- Size 942KB
- Sample260905-ycws3a1eqd
- SHA256 36ea8a4113aa74ed55ca38baf1e803357fa101d50228f14fd8014eeaf63288da
- MD5 03fb3172cc90249fce2fffe5622239c5
- SHA1 260af5212e3f466fa0fb102e080a4e9fd3670481
- SHA512 2344d9ae7bc738e74fb23a9b1bd586bb294bb022ce6842259ce57ee76953949ad9dc90bfa471b2b7b3d06ccf61bd5ffc727c162cb08a76aa19de10256dc7ea6f
- SSDEEP 24576:Ts5/Ba7O5rr+xhVTyMNBs9JnqBplfNxJBF3rR:T8Bf5rrmhVeqsX2xJB
- TLSH T18525F109F3F404F4E4B79138DA62C91AE6F17C9A4771C69F13A882561F336618E3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_03fb3172cc90249fce2fffe5622239c5_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_03fb3172cc90249fce2fffe5622239c5_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_03fb3172cc90249fce2fffe5622239c5_icedid_njrat_vidar
- Size 942KB
- SHA256 36ea8a4113aa74ed55ca38baf1e803357fa101d50228f14fd8014eeaf63288da
- MD5 03fb3172cc90249fce2fffe5622239c5
- SHA1 260af5212e3f466fa0fb102e080a4e9fd3670481
- SHA512 2344d9ae7bc738e74fb23a9b1bd586bb294bb022ce6842259ce57ee76953949ad9dc90bfa471b2b7b3d06ccf61bd5ffc727c162cb08a76aa19de10256dc7ea6f
- SSDEEP 24576:Ts5/Ba7O5rr+xhVTyMNBs9JnqBplfNxJBF3rR:T8Bf5rrmhVeqsX2xJB
- TLSH T18525F109F3F404F4E4B79138DA62C91AE6F17C9A4771C69F13A882561F336618E3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1