General
- Target 2026-09-29_b5ecfdb4412ad5bda794c3ec9d1d187a_elex_icedid_njrat_vidar
- Size 2.4MB
- Sample260930-vr2q3stfnf
- SHA256 ada6fa2557a8568b3108f879c8da264c912fc5d2545fbd1ee1fc16938f98b3b1
- MD5 b5ecfdb4412ad5bda794c3ec9d1d187a
- SHA1 961b769cbfa60d7979f0d06e60bb97a7daaddae3
- SHA512 4a49fdfd9cb4d795c8653db55781c39b45883bcf2af0d74ca42d8509cebaff66c65d6b8fa8df08d3f9275a859d6ca6a6a872e06213722be761af186450f9d09a
- SSDEEP 49152:5MU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvTVBXdch:5MUgTH2vdi
- TLSH T154C5A512654A6F2CD55FD474CB4B88256A273C8A4F34BBEF0685BD313E75AB42F28207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-29_b5ecfdb4412ad5bda794c3ec9d1d187a_elex_icedid_njrat_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_b5ecfdb4412ad5bda794c3ec9d1d187a_elex_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_b5ecfdb4412ad5bda794c3ec9d1d187a_elex_icedid_njrat_vidar
- Size 2.4MB
- SHA256 ada6fa2557a8568b3108f879c8da264c912fc5d2545fbd1ee1fc16938f98b3b1
- MD5 b5ecfdb4412ad5bda794c3ec9d1d187a
- SHA1 961b769cbfa60d7979f0d06e60bb97a7daaddae3
- SHA512 4a49fdfd9cb4d795c8653db55781c39b45883bcf2af0d74ca42d8509cebaff66c65d6b8fa8df08d3f9275a859d6ca6a6a872e06213722be761af186450f9d09a
- SSDEEP 49152:5MU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvTVBXdch:5MUgTH2vdi
- TLSH T154C5A512654A6F2CD55FD474CB4B88256A273C8A4F34BBEF0685BD313E75AB42F28207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1