General
- Target 2026-10-02_f1e942daac8010a26a7efed8f49ae67a_icedid_njrat
- Size 1.3MB
- Sample261002-2nxfhsvbpf
- SHA256 2e981b82327607a26129d9040e951c7b42286b67b1798014d0efc36729404312
- MD5 f1e942daac8010a26a7efed8f49ae67a
- SHA1 2e2154aad4451dccc33f086c09387e34163c067e
- SHA512 488470694557f15268d268e3b8753cd52c97bc4b537af1f09b8db9933f427baffcbfa4440c1493d73e42cc513f6309db6840221d23fd6fe49c1d17b8cc22fdcf
- SSDEEP 12288:PoQJvNRhhcNAhhba43G2LdnrO+12N3zhPAXruYyVHHaf4HJ1jwssawsUoN9PqIl:plhBh8H2hnrSN3zhPiQnDJGaz9
- TLSH T15F557B557BA446B5F0A28A348A65822DE6727C50DD33CE0F11814EEEFFF39518E25B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_f1e942daac8010a26a7efed8f49ae67a_icedid_njrat.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_f1e942daac8010a26a7efed8f49ae67a_icedid_njrat
- Size 1.3MB
- SHA256 2e981b82327607a26129d9040e951c7b42286b67b1798014d0efc36729404312
- MD5 f1e942daac8010a26a7efed8f49ae67a
- SHA1 2e2154aad4451dccc33f086c09387e34163c067e
- SHA512 488470694557f15268d268e3b8753cd52c97bc4b537af1f09b8db9933f427baffcbfa4440c1493d73e42cc513f6309db6840221d23fd6fe49c1d17b8cc22fdcf
- SSDEEP 12288:PoQJvNRhhcNAhhba43G2LdnrO+12N3zhPAXruYyVHHaf4HJ1jwssawsUoN9PqIl:plhBh8H2hnrSN3zhPiQnDJGaz9
- TLSH T15F557B557BA446B5F0A28A348A65822DE6727C50DD33CE0F11814EEEFFF39518E25B32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1