2026-06-06_1ed97f7bf0298ca7e89b63f593771a44_cobalt-strike_icedid_njrat_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-06_1ed97f7bf0298ca7e89b63f593771a44_cobalt-strike_icedid_njrat_vidar
Size 783KB
Sample260606-asebyshs3n
SHA256 2fbaa276a23264133f30a9e2688131fdec170508dd5576b97b99c8045e6f5184
MD5 1ed97f7bf0298ca7e89b63f593771a44
SHA1 95ed17ca5fc6ed0ac61d8695d02ad4be94395dd3
SHA512 a6eafc4bc7b2188d20fccf38333ec884df1d3020cce06fb7b4b650da28c360077a77e08c3088506db077205041cf4a2482a580004daa3ddd0eb34659d8ad2a2f
SSDEEP 12288:Gd6lIV5rLZYbqh+HgkgAtepnnoZM9lMRjOEZ/WJTJvbU1Ur/mM1z07SE:GdtVRZIqsANA8KM7MNDlG+1UCM14F
TLSH
T1B205016272A444F7C5664234C952D576B732BC920B00968B07F47F3BBE732A35E3AB19
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-06_1ed97f7bf0298ca7e89b63f593771a44_cobalt-strike_icedid_njrat_vidar

File Explorer

2026-06-06_1ed97f7bf0298ca7e89b63f593771a44_cobalt-strike_icedid_njrat_vidar

.exe 783KB

2026-06-06_1ed97f7bf0298ca7e89b63f593771a44_cobalt-strike_icedid_njrat_vidar

IMPHASH 0b9a3612bf0e2f78d98ec0e805f52f0f
SHA256 2fbaa276a23264133f30a9e2688131fdec170508dd5576b97b99c8045e6f5184
MD5 1ed97f7bf0298ca7e89b63f593771a44
SHA1 95ed17ca5fc6ed0ac61d8695d02ad4be94395dd3
SHA512 a6eafc4bc7b2188d20fccf38333ec884df1d3020cce06fb7b4b650da28c360077a77e08c3088506db077205041cf4a2482a580004daa3ddd0eb34659d8ad2a2f
SSDEEP 12288:Gd6lIV5rLZYbqh+HgkgAtepnnoZM9lMRjOEZ/WJTJvbU1Ur/mM1z07SE:GdtVRZIqsANA8KM7MNDlG+1UCM14F
TLSH
T1B205016272A444F7C5664234C952D576B732BC920B00968B07F47F3BBE732A35E3AB19
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25316

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

DragFinish DragAcceptFiles DragQueryFileA

gdi32

RealizePalette SelectPalette SetBkMode SetDIBitsToDevice SetMapMode CreateBrushIndirect CreatePalette GetDeviceCaps DeleteObject

user32

GetParent SetWindowLongPtrA GetWindowLongPtrA FillRect GetSysColor MessageBoxA GetWindowRect GetClientRect ScrollWindow InvalidateRect EndPaint BeginPaint UpdateWindow RemoveMenu AppendMenuA EnableMenuItem CheckMenuItem GetSystemMenu GetMenuStringA KillTimer SetTimer VkKeyScanA GetKeyState LoadIconA SetClipboardData CloseClipboard OpenClipboard IsZoomed BringWindowToTop IsIconic MoveWindow ShowWindow DestroyWindow IsWindow CreateWindowExA RegisterClassA DefWindowProcA SendMessageA wsprintfW ReleaseDC GetDC SetForegroundWindow GetForegroundWindow PostThreadMessageA DispatchMessageA TranslateMessage GetMessageA LoadCursorA SetScrollInfo EmptyClipboard

advapi32

RegQueryValueExA RegOpenKeyExA RegCreateKeyExA RegQueryValueExW RegOpenKeyExW RegCloseKey RegSetValueExA

kernel32

SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP IsValidCodePage FindNextFileW FindFirstFileExW FindClose SetFilePointerEx SetStdHandle FlushFileBuffers GetFileType GetProcessHeap CompareStringW HeapAlloc HeapFree GetACP GetCommandLineW GetCommandLineA ExitProcess GetModuleFileNameW WriteFile ReadConsoleW GetConsoleMode ReadFile GetModuleHandleExW FreeLibraryAndExitThread ResumeThread ExitThread CreateThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount HeapSize GetStringTypeW LCMapStringW HeapReAlloc CreateFileW WriteConsoleW GetLastError OutputDebugStringA CloseHandle ReleaseMutex WaitForSingleObject CreateMutexA Sleep GetCurrentThread GetCurrentThreadId FreeLibrary GetProcAddress LoadLibraryA MultiByteToWideChar WideCharToMultiByte IsDBCSLeadByteEx GetConsoleCP GetConsoleOutputCP RaiseException GetModuleFileNameA GetModuleHandleA GetVersion GetStdHandle GetSystemTime GlobalAlloc GlobalUnlock GlobalLock GetPrivateProfileStringA WriteConsoleInputA GenerateConsoleCtrlEvent RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW DeleteCriticalSection RtlUnwindEx SetLastError EnterCriticalSection LeaveCriticalSection

Name

.text

Size

110KB

Virtual Size

109KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

44KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

568KB

Virtual Size

572KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-06_1ed97f7bf0298ca7e89b63f593771a44_cobalt-strike_icedid_njrat_vidar

shell32

gdi32

user32

advapi32

kernel32

generic