General

  • Target
    2026-11-03_70d06fdf33a9b2ad126a7f2445832c8a_icedid_njrat
  • Size 3.3MB
  • Sample261104-vsrx9sea69
  • SHA256 b8a4e32e500ebde547d6047361c7c04a808abf1b92e4022ecdd163e505e2391e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-11-03_70d06fdf33a9b2ad126a7f2445832c8a_icedid_njrat
    • Size 3.3MB
    • SHA256 b8a4e32e500ebde547d6047361c7c04a808abf1b92e4022ecdd163e505e2391e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks