General
- Target 2026-09-09_d32271d6e08387b4bee28f16dfe81a57_icedid_njrat_vidar
- Size 5.5MB
- Sample260910-23h7fahp7w
- SHA256 1838602c3c9284c2b1c44278278672c42f48487adfec41de4bbdd68aa2658827
- MD5 d32271d6e08387b4bee28f16dfe81a57
- SHA1 12df408c18aae69fd3dfef33ac7a27ca2194ce19
- SHA512 d86cb3f4540dcc154691bccbd3424b7957bdcbb2d1412c58a9c9ef1ef8427449611c0c800e159558db8cc51aeb46f7dd52b0dc7e488358aebcd7e6b42991384c
- SSDEEP 49152:c3xroI34vkm0hBtwl+SdhxEx3gO8o/Dq3GODGDAQO7EmfIo3XksOnN9qECDYUM0m:C2CmrT4wacisQC+ccUM0un2QwtnGSw
- TLSH T140465A1F676981EDC477D13EE5564F81F27A70464B224FDB039002E92EAF5E48FBA620
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_d32271d6e08387b4bee28f16dfe81a57_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_d32271d6e08387b4bee28f16dfe81a57_icedid_njrat_vidar
- Size 5.5MB
- SHA256 1838602c3c9284c2b1c44278278672c42f48487adfec41de4bbdd68aa2658827
- MD5 d32271d6e08387b4bee28f16dfe81a57
- SHA1 12df408c18aae69fd3dfef33ac7a27ca2194ce19
- SHA512 d86cb3f4540dcc154691bccbd3424b7957bdcbb2d1412c58a9c9ef1ef8427449611c0c800e159558db8cc51aeb46f7dd52b0dc7e488358aebcd7e6b42991384c
- SSDEEP 49152:c3xroI34vkm0hBtwl+SdhxEx3gO8o/Dq3GODGDAQO7EmfIo3XksOnN9qECDYUM0m:C2CmrT4wacisQC+ccUM0un2QwtnGSw
- TLSH T140465A1F676981EDC477D13EE5564F81F27A70464B224FDB039002E92EAF5E48FBA620
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1