General
- Target 2026-11-03_70d06fdf33a9b2ad126a7f2445832c8a_icedid_njrat
- Size 3.3MB
- Sample261104-vsrx9sea69
- SHA256 b8a4e32e500ebde547d6047361c7c04a808abf1b92e4022ecdd163e505e2391e
- MD5 70d06fdf33a9b2ad126a7f2445832c8a
- SHA1 eeefa5ca80ebb7839dacd0bcf1fb5bbb9b17d768
- SHA512 9cfaaf14d202a651fa6473f4626a1b5ad2411ede370a28674905ea7e5dab5941524a3a1a9d23ce94ac3b9de5495794540b49391f6e1311f0ccf1aee42202029a
- SSDEEP 49152:Rg/7YPrtBHEM2OzRaKNE4VpTuKouRlnBncC5x82/k+PPGt03kVOxQqrC7U4H:iapEk5yYlPwA5rC7Uc
- TLSH T19AF5AE5A77A841F8D17BD17C8A468A46F6B134064F3197CB12B4879E2F33AE14E7E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_70d06fdf33a9b2ad126a7f2445832c8a_icedid_njrat.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_70d06fdf33a9b2ad126a7f2445832c8a_icedid_njrat.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_70d06fdf33a9b2ad126a7f2445832c8a_icedid_njrat
- Size 3.3MB
- SHA256 b8a4e32e500ebde547d6047361c7c04a808abf1b92e4022ecdd163e505e2391e
- MD5 70d06fdf33a9b2ad126a7f2445832c8a
- SHA1 eeefa5ca80ebb7839dacd0bcf1fb5bbb9b17d768
- SHA512 9cfaaf14d202a651fa6473f4626a1b5ad2411ede370a28674905ea7e5dab5941524a3a1a9d23ce94ac3b9de5495794540b49391f6e1311f0ccf1aee42202029a
- SSDEEP 49152:Rg/7YPrtBHEM2OzRaKNE4VpTuKouRlnBncC5x82/k+PPGt03kVOxQqrC7U4H:iapEk5yYlPwA5rC7Uc
- TLSH T19AF5AE5A77A841F8D17BD17C8A468A46F6B134064F3197CB12B4879E2F33AE14E7E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Executes dropped EXE
-
Drops file in System32 directory