2026-07-05_88fc6837345eb4c3adf2e536120f47c9_icedid_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-05_88fc6837345eb4c3adf2e536120f47c9_icedid_njrat_stealc
Size 12.9MB
Sample260705-kdmd5abs2x
SHA256 6c7199033a7b99bef15af4c3d7e6cb2dbea81c28da633a04f8afc8504f40e377
MD5 88fc6837345eb4c3adf2e536120f47c9
SHA1 6eb8692d2e328092c77ce5c29ec982e8753d67f8
SHA512 4d2c60a6f628d9c47953e44a2cc022d8608c0f17a6633fbcaa3a66158fddcba652aaef9b5355a2c69a26647068c49a4edf93fdbd9f2ac73718727cbb82417fbe
SSDEEP 393216:MdtpITvLGPF7s2neVWEbjA3/3vvDTdKrO2GVGi1oyA/E:/s6geVW2jA3//bTQrO2ni1Ic
TLSH
T156D6F1AD1C88F86CD867C7F0B4984580E1085DDA5BDB67E73438967238A4AC5BFF2127
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-05_88fc6837345eb4c3adf2e536120f47c9_icedid_njrat_stealc

File Explorer

2026-07-05_88fc6837345eb4c3adf2e536120f47c9_icedid_njrat_stealc

.exe 12.9MB

2026-07-05_88fc6837345eb4c3adf2e536120f47c9_icedid_njrat_stealc

IMPHASH 363686b14e408537df35564644fa17f3
SHA256 6c7199033a7b99bef15af4c3d7e6cb2dbea81c28da633a04f8afc8504f40e377
MD5 88fc6837345eb4c3adf2e536120f47c9
SHA1 6eb8692d2e328092c77ce5c29ec982e8753d67f8
SHA512 4d2c60a6f628d9c47953e44a2cc022d8608c0f17a6633fbcaa3a66158fddcba652aaef9b5355a2c69a26647068c49a4edf93fdbd9f2ac73718727cbb82417fbe
SSDEEP 393216:MdtpITvLGPF7s2neVWEbjA3/3vvDTdKrO2GVGi1oyA/E:/s6geVW2jA3//bTQrO2ni1Ic
TLSH
T156D6F1AD1C88F86CD867C7F0B4984580E1085DDA5BDB67E73438967238A4AC5BFF2127
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

15790400

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

751KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

270KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

682KB

Virtual Size

681KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.imp

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.prv

Size

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.4y5u4

Size

12.2MB

Virtual Size

12.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

19KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2026-07-05_88fc6837345eb4c3adf2e536120f47c9_icedid_njrat_stealc

d3d11

dwmapi

kernel32

user32

gdi32

advapi32

shell32

imm32

d3dcompiler_47

generic