General
- Target 2026-11-02_fe9eeb9cb6a52b5c721671a9f1f8b77c_icedid_njrat_ryuk_vidar
- Size 2.3MB
- Sample261102-vntw3avybs
- SHA256 204a3a749757c6e42d0319763e1e1cb1738f9b7217f94d4d6e34315e82495c46
- MD5 fe9eeb9cb6a52b5c721671a9f1f8b77c
- SHA1 96cc4a59bcdc38e1a66da30e714cbb10c0a4e418
- SHA512 fc7c3aae7830cf18a129828ebd3d946cd0a1eef0a78f66bd314310420b13f99b0f3831d9651c418ea7c09262c325b76076750b07784d3834e9bdcc632df5182f
- SSDEEP 49152:qgX7o/W7twZ4K5M9MkrVjHSYbh8KWu+0206MTAlDmg27RnWGj:zLAZ4K5MXVjHSYta0CD527BWG
- TLSH T1F2B58C17E28509E9D2A9C074CE45D136EB22BC5D1BF2A5FB3640B2D52E37AE07B39710
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-02_fe9eeb9cb6a52b5c721671a9f1f8b77c_icedid_njrat_ryuk_vidar.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-02_fe9eeb9cb6a52b5c721671a9f1f8b77c_icedid_njrat_ryuk_vidar.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-02_fe9eeb9cb6a52b5c721671a9f1f8b77c_icedid_njrat_ryuk_vidar
- Size 2.3MB
- SHA256 204a3a749757c6e42d0319763e1e1cb1738f9b7217f94d4d6e34315e82495c46
- MD5 fe9eeb9cb6a52b5c721671a9f1f8b77c
- SHA1 96cc4a59bcdc38e1a66da30e714cbb10c0a4e418
- SHA512 fc7c3aae7830cf18a129828ebd3d946cd0a1eef0a78f66bd314310420b13f99b0f3831d9651c418ea7c09262c325b76076750b07784d3834e9bdcc632df5182f
- SSDEEP 49152:qgX7o/W7twZ4K5M9MkrVjHSYbh8KWu+0206MTAlDmg27RnWGj:zLAZ4K5MXVjHSYta0CD527BWG
- TLSH T1F2B58C17E28509E9D2A9C074CE45D136EB22BC5D1BF2A5FB3640B2D52E37AE07B39710
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1