General
- Target 2026-09-07_b28609af7c5c0a835a301dd9efd48433_elex_icedid_njrat_wabot
- Size 2.4MB
- Sample260908-jxblasea78
- SHA256 eeaf48e33e2fe08b7e8e5db96cc9df3ea3f93373ac54eb0dfac0fde2ff6dc6ec
- MD5 b28609af7c5c0a835a301dd9efd48433
- SHA1 9e1533b4a0fa58aeb1dbd74fa10acceef86d0dfb
- SHA512 86510919243867eb100de41be676bd394199e1f0070a58c83b5884fe7f3f62fae1736dd69dca874d744b20286b897a03b44438a402ba20a858f8f646b9578fd1
- SSDEEP 49152:heJqMyLs0nrzbT874YsdeUtTx0EWfmh4PTn8cHGphTh3:w4fnrzbTFYATx0E8mWjeF
- TLSH T1A2C522833B40BDE2CD1201F09E75964197B6AAB44E51C7237CEC720E8F679D49E39E68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-07_b28609af7c5c0a835a301dd9efd48433_elex_icedid_njrat_wabot.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_b28609af7c5c0a835a301dd9efd48433_elex_icedid_njrat_wabot.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_b28609af7c5c0a835a301dd9efd48433_elex_icedid_njrat_wabot
- Size 2.4MB
- SHA256 eeaf48e33e2fe08b7e8e5db96cc9df3ea3f93373ac54eb0dfac0fde2ff6dc6ec
- MD5 b28609af7c5c0a835a301dd9efd48433
- SHA1 9e1533b4a0fa58aeb1dbd74fa10acceef86d0dfb
- SHA512 86510919243867eb100de41be676bd394199e1f0070a58c83b5884fe7f3f62fae1736dd69dca874d744b20286b897a03b44438a402ba20a858f8f646b9578fd1
- SSDEEP 49152:heJqMyLs0nrzbT874YsdeUtTx0EWfmh4PTn8cHGphTh3:w4fnrzbTFYATx0E8mWjeF
- TLSH T1A2C522833B40BDE2CD1201F09E75964197B6AAB44E51C7237CEC720E8F679D49E39E68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Wabot worm
-
Modifies WinLogon for persistence
-
Drops file in System32 directory