General
- Target 2026-11-01_b3c39599d8dc8e8f7869538549a6a80d_icedid_mespinoza_njrat
- Size 21.2MB
- Sample261102-nccebasya1
- SHA256 2a5153c118d312ebf4c024dd7bc9b65fd840aae260712e579842eaba01083ca5
- MD5 b3c39599d8dc8e8f7869538549a6a80d
- SHA1 a88a477317fbafe8157ba043698f81174cb7e670
- SHA512 e2dc1358fdfdc79082e36d7b2025598c893c5e65346519ba10f899f345031ffe274608501c4c29119821edbd31cebfa51af7c9682e9229db8d693578f524e884
- SSDEEP 196608:zfpFAK2nkR4fYUCLFhbmWqPWpyR1pOIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIt:zfpFAK2ny4fqFhlqPWpyR1px
- TLSH T1342739B2D95185CCDE2CA6B5CE1E89FDCEA26C1AAF9089AF41143C11ED732C09D3D25D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_b3c39599d8dc8e8f7869538549a6a80d_icedid_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_b3c39599d8dc8e8f7869538549a6a80d_icedid_mespinoza_njrat.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_b3c39599d8dc8e8f7869538549a6a80d_icedid_mespinoza_njrat
- Size 21.2MB
- SHA256 2a5153c118d312ebf4c024dd7bc9b65fd840aae260712e579842eaba01083ca5
- MD5 b3c39599d8dc8e8f7869538549a6a80d
- SHA1 a88a477317fbafe8157ba043698f81174cb7e670
- SHA512 e2dc1358fdfdc79082e36d7b2025598c893c5e65346519ba10f899f345031ffe274608501c4c29119821edbd31cebfa51af7c9682e9229db8d693578f524e884
- SSDEEP 196608:zfpFAK2nkR4fYUCLFhbmWqPWpyR1pOIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIt:zfpFAK2ny4fqFhlqPWpyR1px
- TLSH T1342739B2D95185CCDE2CA6B5CE1E89FDCEA26C1AAF9089AF41143C11ED732C09D3D25D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext