Analysis
- max time kernel
149s - max time network
142s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
27/10/2026, 18:10
General
- Target 2026-10-26_4b811d1dc681034e55e1f7abfcb5318a_icedid_njrat_vidar.exe
- Size 1008KB
- Sample261027-wsetdatw6m
- SHA256 5f8d136abde0e47ee98afc4c9ea153d740c1eda9106a980eab35142c1672af69
Score
5/10
Malware Config
Signatures
- Drops file in System32 directory 4 IoCs
- UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-26_4b811d1dc681034e55e1f7abfcb5318a_icedid_njrat_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-26_4b811d1dc681034e55e1f7abfcb5318a_icedid_njrat_vidar.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4528-1-0x00007FF6089B0000-0x00007FF608B39000-memory.dmp
memory/4528-2-0x000001D0B5630000-0x000001D0B56B3000-memory.dmp
memory/4528-3-0x000001D0B5630000-0x000001D0B56B3000-memory.dmp
memory/4528-0-0x000001D0B5630000-0x000001D0B56B3000-memory.dmp
memory/4528-9-0x000001D0B5630000-0x000001D0B56B3000-memory.dmp
memory/4528-12-0x00007FF6089B0000-0x00007FF608B39000-memory.dmp