General
- Target 2026-09-28_eb6b0cd52679750f3c3268caed16607c_icedid_njrat
- Size 1.1MB
- Sample260928-2ec1hsverc
- SHA256 fb59d1627b21819c1383da47e8f616d347ae63d09cfa799231e61ba2b53ecbd5
- MD5 eb6b0cd52679750f3c3268caed16607c
- SHA1 a8bcbf96b0d8fac6107bf6f77422451d5d4ed906
- SHA512 9fb0035c7a137a3720b8f376378fbfa14460e6dbc2badb33a01af7cbf5a97d55f8f924bb7121fd3b8639bd149da5d9ad9e92b1db8c4f89bbd9128d317b10a239
- SSDEEP 12288:S4EIrqS6abBct5K4RTKG/Zn35y7RJhL6mRZt5naitN2lsZsyITdgUHXKxa:qIrqbMWpORJhXRZD7VZbITdXH
- TLSH T1A4359E26679492A8F176823D8951C489D6A57C10EBA5CBCF83D0CE570F73AD08E7A3F1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-28_eb6b0cd52679750f3c3268caed16607c_icedid_njrat.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-28_eb6b0cd52679750f3c3268caed16607c_icedid_njrat.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-28_eb6b0cd52679750f3c3268caed16607c_icedid_njrat
- Size 1.1MB
- SHA256 fb59d1627b21819c1383da47e8f616d347ae63d09cfa799231e61ba2b53ecbd5
- MD5 eb6b0cd52679750f3c3268caed16607c
- SHA1 a8bcbf96b0d8fac6107bf6f77422451d5d4ed906
- SHA512 9fb0035c7a137a3720b8f376378fbfa14460e6dbc2badb33a01af7cbf5a97d55f8f924bb7121fd3b8639bd149da5d9ad9e92b1db8c4f89bbd9128d317b10a239
- SSDEEP 12288:S4EIrqS6abBct5K4RTKG/Zn35y7RJhL6mRZt5naitN2lsZsyITdgUHXKxa:qIrqbMWpORJhXRZD7VZbITdXH
- TLSH T1A4359E26679492A8F176823D8951C489D6A57C10EBA5CBCF83D0CE570F73AD08E7A3F1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1