General
- Target 2026-09-28_b1c5f87cd1cfe6cbd3a1abb5d3f2135a_icedid_njrat_stealc
- Size 4.9MB
- Sample260928-pyg3csvzgw
- SHA256 bc559290b1e03ac544b2f25ed40870cf3ea686d8f674c93b19308ed6223d1c79
- MD5 b1c5f87cd1cfe6cbd3a1abb5d3f2135a
- SHA1 e573efb38b0aff96c10ec3ec8fe0aabb452aa77f
- SHA512 e4301a9b0c37fddeeba5797f3fa3f4efac3d378f42a0bfccac891310e56150c0def6d628720d221227105a172ef957241c3385fc61ebaa78268b349632164090
- SSDEEP 98304:4JAKjt93hISIjDiT0tMlM3B6cyVS26bk+u3rXgoGn:Gjjt9FIjKM3B6oADg
- TLSH T16636AE02B68A24FEC59AC474974B5A67692130CF0B36ADEF03C446353FA6AF41F3A715
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-28_b1c5f87cd1cfe6cbd3a1abb5d3f2135a_icedid_njrat_stealc.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-28_b1c5f87cd1cfe6cbd3a1abb5d3f2135a_icedid_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-28_b1c5f87cd1cfe6cbd3a1abb5d3f2135a_icedid_njrat_stealc
- Size 4.9MB
- SHA256 bc559290b1e03ac544b2f25ed40870cf3ea686d8f674c93b19308ed6223d1c79
- MD5 b1c5f87cd1cfe6cbd3a1abb5d3f2135a
- SHA1 e573efb38b0aff96c10ec3ec8fe0aabb452aa77f
- SHA512 e4301a9b0c37fddeeba5797f3fa3f4efac3d378f42a0bfccac891310e56150c0def6d628720d221227105a172ef957241c3385fc61ebaa78268b349632164090
- SSDEEP 98304:4JAKjt93hISIjDiT0tMlM3B6cyVS26bk+u3rXgoGn:Gjjt9FIjKM3B6oADg
- TLSH T16636AE02B68A24FEC59AC474974B5A67692130CF0B36ADEF03C446353FA6AF41F3A715
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Deletes itself
-
Executes dropped EXE