a6229644581a9f45309f2d789354339342ba98a6ab186fe730280180842a5b94 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-10-10...ar.exe

windows10-2004-x64

7

2026-10-10...ar.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-10_4185abf8bf8f356ee3b2920f53a7a453_icedid_njrat_vidar
Size 23.6MB
Sample261011-tfvb7acg54
SHA256 a6229644581a9f45309f2d789354339342ba98a6ab186fe730280180842a5b94
MD5 4185abf8bf8f356ee3b2920f53a7a453
SHA1 bd29f15462e04da4d5e429baee688dd921ad98d5
SHA512 1b16db751169af5c4505ab6c273c19514d961a859da392126ed691515b3314ee280359ef5bbe1689ef1b8e92927d9ab9311229669eb73acd9d9763e94507e4bf
SSDEEP 98304:LO0C/M7RuLRQjOOralBe7h0BpcrVnab3/:LO0LAHlBe7aBpcrsD
TLSH
T100478B1567FD41D8E2F7E179CAF6841BE6B1B8521631CB8F0061478E1F3B6624D2AB23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery ransomware spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-10-10_4185abf8bf8f356ee3b2920f53a7a453_icedid_njrat_vidar.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

17 signatures

150 seconds

defense_evasion discovery ransomware spyware stealer

Behavioral task

behavioral2

Sample

2026-10-10_4185abf8bf8f356ee3b2920f53a7a453_icedid_njrat_vidar.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  2026-10-10_4185abf8bf8f356ee3b2920f53a7a453_icedid_njrat_vidar
- Size 23.6MB
- SHA256 a6229644581a9f45309f2d789354339342ba98a6ab186fe730280180842a5b94
- MD5 4185abf8bf8f356ee3b2920f53a7a453
- SHA1 bd29f15462e04da4d5e429baee688dd921ad98d5
- SHA512 1b16db751169af5c4505ab6c273c19514d961a859da392126ed691515b3314ee280359ef5bbe1689ef1b8e92927d9ab9311229669eb73acd9d9763e94507e4bf
- SSDEEP 98304:LO0C/M7RuLRQjOOralBe7h0BpcrVnab3/:LO0LAHlBe7aBpcrsD
- TLSH
  T100478B1567FD41D8E2F7E179CAF6841BE6B1B8521631CB8F0061478E1F3B6624D2AB23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery ransomware spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryransomwarespywarestealer

behavioral2

© 2018-2026

Terms | Privacy