General
- Target 2026-09-26_49a2b346adc79761d267c36a3a8ee4d3_icedid_njrat_vidar
- Size 4.0MB
- Sample260926-3eed1stele
- SHA256 0b79da011fecf4d1daf70a09e9e33045fb340cf5880a500ea776e75d4aee7cd7
- MD5 49a2b346adc79761d267c36a3a8ee4d3
- SHA1 58b21210facc7686c0d77e1c9749de2c94c58530
- SHA512 8239b5bc79b7e06b38d90785e347977455aba0d7f156fa4162031a0318e4009a13bdabe41204a002403a5ad842d37ac33ef24f11abd1f7648af66971bf928eb6
- SSDEEP 49152:KjPJJsMg0UMp2viAEk2qtFoLuzO7ge9fDqgs16IQsVToEw5QhYsxbqFEj2KT:eP/0mpEeqgsMIQsVTX66YsxbyEj2w
- TLSH T19A169D6576ED80D4C466D934C54B8907DAF2BC520931C78F40ADDA8F2F3B1620E7AB7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-26_49a2b346adc79761d267c36a3a8ee4d3_icedid_njrat_vidar.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-26_49a2b346adc79761d267c36a3a8ee4d3_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-26_49a2b346adc79761d267c36a3a8ee4d3_icedid_njrat_vidar
- Size 4.0MB
- SHA256 0b79da011fecf4d1daf70a09e9e33045fb340cf5880a500ea776e75d4aee7cd7
- MD5 49a2b346adc79761d267c36a3a8ee4d3
- SHA1 58b21210facc7686c0d77e1c9749de2c94c58530
- SHA512 8239b5bc79b7e06b38d90785e347977455aba0d7f156fa4162031a0318e4009a13bdabe41204a002403a5ad842d37ac33ef24f11abd1f7648af66971bf928eb6
- SSDEEP 49152:KjPJJsMg0UMp2viAEk2qtFoLuzO7ge9fDqgs16IQsVToEw5QhYsxbqFEj2KT:eP/0mpEeqgsMIQsVTX66YsxbyEj2w
- TLSH T19A169D6576ED80D4C466D934C54B8907DAF2BC520931C78F40ADDA8F2F3B1620E7AB7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1