General
- Target 2026-09-28_bddcf90c6de8cc8c9244011316b62b2c_elex_icedid_njrat_wabot
- Size 309KB
- Sample260929-cbwwsay1bv
- SHA256 b3f6ed3af592ae569f1833af604f5f0d9c85c7cd50d48037e391095782dbc751
- MD5 bddcf90c6de8cc8c9244011316b62b2c
- SHA1 35f676ab541939479f7b482c9399da61f0882acf
- SHA512 43fca7c4f12b8d1e64ad5c2fd329dd6707a5518a8fc4adde3ee04b415361d52d3a74fadd062b860be9e44dbba4ab966215d540778a6a41c0e1ba583cc6697f4a
- SSDEEP 6144:x731bdBaBozbQhJcVW+pVDmQ9B+YKRDGLUTmJZv:h1bcJcVDVDmQ9B+YKRGf/v
- TLSH T18D645A877B01ACE1CE0105F48D349259A7B6B9F48E50CB173CECB30E9F566D46E29E68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-28_bddcf90c6de8cc8c9244011316b62b2c_elex_icedid_njrat_wabot.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-28_bddcf90c6de8cc8c9244011316b62b2c_elex_icedid_njrat_wabot.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-28_bddcf90c6de8cc8c9244011316b62b2c_elex_icedid_njrat_wabot
- Size 309KB
- SHA256 b3f6ed3af592ae569f1833af604f5f0d9c85c7cd50d48037e391095782dbc751
- MD5 bddcf90c6de8cc8c9244011316b62b2c
- SHA1 35f676ab541939479f7b482c9399da61f0882acf
- SHA512 43fca7c4f12b8d1e64ad5c2fd329dd6707a5518a8fc4adde3ee04b415361d52d3a74fadd062b860be9e44dbba4ab966215d540778a6a41c0e1ba583cc6697f4a
- SSDEEP 6144:x731bdBaBozbQhJcVW+pVDmQ9B+YKRDGLUTmJZv:h1bcJcVDVDmQ9B+YKRGf/v
- TLSH T18D645A877B01ACE1CE0105F48D349259A7B6B9F48E50CB173CECB30E9F566D46E29E68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Wabot worm
-
Modifies WinLogon for persistence
-
Drops file in System32 directory