General
- Target 2026-10-16_8e26b8d34ef6fdfddbd95d64bb9669b6_elex_icedid_njrat_swisyn
- Size 408KB
- Sample261017-pg8hzsszhy
- SHA256 c7a4ce697a9c9a0275c295091c8795794981ab814de0ba9f1982ad9d8a98c8d0
- MD5 8e26b8d34ef6fdfddbd95d64bb9669b6
- SHA1 a1ac9c6c81a19ad11992334af1469b59988f9efa
- SHA512 780968821db6c4d70686a45387c8b2039976c6994b2e981cc4fb0950694b18a07aef0276dbc4782e348b683022bbdea47079128436b88d1a8682747398063ed8
- SSDEEP 6144:UsLqdufVUNDaX5YKyLfYtHChGNrax+UOnACyv1nZTtvV74:PFUNDaX5YKSfJkNax+cvf4
- TLSH T10F946C17A7500CBAD823C17988968A1AF672BC290790EE9F136497152F736D37AF9307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-16_8e26b8d34ef6fdfddbd95d64bb9669b6_elex_icedid_njrat_swisyn.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-16_8e26b8d34ef6fdfddbd95d64bb9669b6_elex_icedid_njrat_swisyn.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-16_8e26b8d34ef6fdfddbd95d64bb9669b6_elex_icedid_njrat_swisyn
- Size 408KB
- SHA256 c7a4ce697a9c9a0275c295091c8795794981ab814de0ba9f1982ad9d8a98c8d0
- MD5 8e26b8d34ef6fdfddbd95d64bb9669b6
- SHA1 a1ac9c6c81a19ad11992334af1469b59988f9efa
- SHA512 780968821db6c4d70686a45387c8b2039976c6994b2e981cc4fb0950694b18a07aef0276dbc4782e348b683022bbdea47079128436b88d1a8682747398063ed8
- SSDEEP 6144:UsLqdufVUNDaX5YKyLfYtHChGNrax+UOnACyv1nZTtvV74:PFUNDaX5YKSfJkNax+cvf4
- TLSH T10F946C17A7500CBAD823C17988968A1AF672BC290790EE9F136497152F736D37AF9307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory