General
- Target 2026-10-01_57f61085ab811a3b42381da2e1b78df2_elex_icedid_njrat_nymaim_rhadamanthys_vidar
- Size 2.4MB
- Sample261002-rl82es1s2k
- SHA256 4ccde0d170ec5ec3e0ee3a124e9934805160c46a2deb29bee8a335f947e526e1
- MD5 57f61085ab811a3b42381da2e1b78df2
- SHA1 517edb625a3f1a7d1976c36b8793c2e941d05687
- SHA512 906d18e6531875bdd961b423f3bb6c35a2624c729031ae603b34a86b3bd0af2218472266b0e74aac5ee36740adb39e46c62cc9fa19ff124f3d64b464f3ff8200
- SSDEEP 24576:uUfXS+xbQouAIfxvnwF2mHSgAhFxeQaTtOhdsQMCkBQcinQifQa6DnZp:hC+x8ouAIfGF24OhmfQ9QhFj
- TLSH T146C5400367FC0518F5F36B789A7A88409A37BC660F38E59F01581D5D0B73A928DB6B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_57f61085ab811a3b42381da2e1b78df2_elex_icedid_njrat_nymaim_rhadamanthys_vidar.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_57f61085ab811a3b42381da2e1b78df2_elex_icedid_njrat_nymaim_rhadamanthys_vidar.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_57f61085ab811a3b42381da2e1b78df2_elex_icedid_njrat_nymaim_rhadamanthys_vidar
- Size 2.4MB
- SHA256 4ccde0d170ec5ec3e0ee3a124e9934805160c46a2deb29bee8a335f947e526e1
- MD5 57f61085ab811a3b42381da2e1b78df2
- SHA1 517edb625a3f1a7d1976c36b8793c2e941d05687
- SHA512 906d18e6531875bdd961b423f3bb6c35a2624c729031ae603b34a86b3bd0af2218472266b0e74aac5ee36740adb39e46c62cc9fa19ff124f3d64b464f3ff8200
- SSDEEP 24576:uUfXS+xbQouAIfxvnwF2mHSgAhFxeQaTtOhdsQMCkBQcinQifQa6DnZp:hC+x8ouAIfGF24OhmfQ9QhFj
- TLSH T146C5400367FC0518F5F36B789A7A88409A37BC660F38E59F01581D5D0B73A928DB6B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory