General
- Target 2026-09-28_ee9d66c1d358ad1a84d71c82802ef7f6_elex_icedid_ipamor_njrat_nymaim_rhadamanthys_vidar
- Size 686KB
- Sample260928-16bfbsvdle
- SHA256 122dab5cd6f89261664d5688a814b896a115b5b82fe782ae0d85a773b078d056
- MD5 ee9d66c1d358ad1a84d71c82802ef7f6
- SHA1 9d93ff352fd65c3b3c18332e454406978617f83f
- SHA512 b23232f2230eabb8447b5fc694a3aecccf914350d7380d65b8471c116fc5adbff6b9dee417c8b2382d96c082d5a5dfa5b591fb329a54ae5e03cdf8c196c93603
- SSDEEP 12288:phJ6mfBSTOYREnD+k3HVJ5xDfp4D7/SAOZi+5v4+rcKftP:phJ6mfYTOYKDJVJTt4D7/SAOZi+5v48v
- TLSH T12BE45D0167F405A9F1B79B3DC9B1461AED72BC229E31DA0E1364425ACE33B52CD77B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-28_ee9d66c1d358ad1a84d71c82802ef7f6_elex_icedid_ipamor_njrat_nymaim_rhadamanthys_vidar.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-28_ee9d66c1d358ad1a84d71c82802ef7f6_elex_icedid_ipamor_njrat_nymaim_rhadamanthys_vidar.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-28_ee9d66c1d358ad1a84d71c82802ef7f6_elex_icedid_ipamor_njrat_nymaim_rhadamanthys_vidar
- Size 686KB
- SHA256 122dab5cd6f89261664d5688a814b896a115b5b82fe782ae0d85a773b078d056
- MD5 ee9d66c1d358ad1a84d71c82802ef7f6
- SHA1 9d93ff352fd65c3b3c18332e454406978617f83f
- SHA512 b23232f2230eabb8447b5fc694a3aecccf914350d7380d65b8471c116fc5adbff6b9dee417c8b2382d96c082d5a5dfa5b591fb329a54ae5e03cdf8c196c93603
- SSDEEP 12288:phJ6mfBSTOYREnD+k3HVJ5xDfp4D7/SAOZi+5v4+rcKftP:phJ6mfYTOYKDJVJTt4D7/SAOZi+5v48v
- TLSH T12BE45D0167F405A9F1B79B3DC9B1461AED72BC229E31DA0E1364425ACE33B52CD77B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1