General
- Target 2026-09-30_3e0d02c2751e2fc4a79fd08c0ece9538_icedid_njrat_vidar
- Size 4.8MB
- Sample261001-s6rtbafe69
- SHA256 9d28897a859469d67d9490156d9ff87aa607f935740b7412c907ba60a61b7880
- MD5 3e0d02c2751e2fc4a79fd08c0ece9538
- SHA1 00293e230f8441145fe31a59a3135a25323733c2
- SHA512 6dbc933a0a6e8054f7784b58e827963c7d668ac9d69482cff1fa5bf2a4cce5d2de25b192a8e8e2c6d3f4e5aa24d034b4d9a4398aeb9e0e3ed23255a52bd2474a
- SSDEEP 49152:rdRba8fD8qinfMSKJXIUQREV1QOTu1U5ai2KzYo5UC9RhuCTFKlaxV5dgbTEBzBU:g/IJsiCKsop7cTY1iDs4
- TLSH T1F9367C656BF880F5E0A7E178897AC9B2F77678020D71DB5F0251CA1F2F33A904D29726
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-30_3e0d02c2751e2fc4a79fd08c0ece9538_icedid_njrat_vidar.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_3e0d02c2751e2fc4a79fd08c0ece9538_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_3e0d02c2751e2fc4a79fd08c0ece9538_icedid_njrat_vidar
- Size 4.8MB
- SHA256 9d28897a859469d67d9490156d9ff87aa607f935740b7412c907ba60a61b7880
- MD5 3e0d02c2751e2fc4a79fd08c0ece9538
- SHA1 00293e230f8441145fe31a59a3135a25323733c2
- SHA512 6dbc933a0a6e8054f7784b58e827963c7d668ac9d69482cff1fa5bf2a4cce5d2de25b192a8e8e2c6d3f4e5aa24d034b4d9a4398aeb9e0e3ed23255a52bd2474a
- SSDEEP 49152:rdRba8fD8qinfMSKJXIUQREV1QOTu1U5ai2KzYo5UC9RhuCTFKlaxV5dgbTEBzBU:g/IJsiCKsop7cTY1iDs4
- TLSH T1F9367C656BF880F5E0A7E178897AC9B2F77678020D71DB5F0251CA1F2F33A904D29726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory