2026-07-08_2ba8a53f7d7d9d48c71e152cb0fc1ca3_cobalt-strike_hijackloader_icedid_njrat_vidar

General

Target
2026-07-08_2ba8a53f7d7d9d48c71e152cb0fc1ca3_cobalt-strike_hijackloader_icedid_njrat_vidar
Size 289KB
Sample260708-da42faax5r
SHA256 db0d0483e9910b7b9e8d4e907fff48807e91484a7caf50703d1dc765f8b44828
MD5 2ba8a53f7d7d9d48c71e152cb0fc1ca3
SHA1 51cdb8ae31a3d9f17a1d0f2c0f888fb47172f922
SHA512 286d1c41371501473d61f8ca15830126c06473e1190e4180a1052d8fc549b3caf16569a179d9be816ee49184dfa3a3b5ce203572b803d9a625e163991be0d08d
SSDEEP 6144:yzWaLmxs1U6Cfxq4MkHq/NdNM0ohBM/Mp:KmaU6Cq7kYPboXv
TLSH
T114546C2AB3A508F9ED37813CCD529546E672B8161771DAAF03A4421A5F332A09D3FF71
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-08_2ba8a53f7d7d9d48c71e152cb0fc1ca3_cobalt-strike_hijackloader_icedid_njrat_vidar

File Explorer

2026-07-08_2ba8a53f7d7d9d48c71e152cb0fc1ca3_cobalt-strike_hijackloader_icedid_njrat_vidar

.exe 289KB

2026-07-08_2ba8a53f7d7d9d48c71e152cb0fc1ca3_cobalt-strike_hijackloader_icedid_njrat_vidar

IMPHASH c04616404a4d1698e9d84ab5333f547b
SHA256 db0d0483e9910b7b9e8d4e907fff48807e91484a7caf50703d1dc765f8b44828
MD5 2ba8a53f7d7d9d48c71e152cb0fc1ca3
SHA1 51cdb8ae31a3d9f17a1d0f2c0f888fb47172f922
SHA512 286d1c41371501473d61f8ca15830126c06473e1190e4180a1052d8fc549b3caf16569a179d9be816ee49184dfa3a3b5ce203572b803d9a625e163991be0d08d
SSDEEP 6144:yzWaLmxs1U6Cfxq4MkHq/NdNM0ohBM/Mp:KmaU6Cq7kYPboXv
TLSH
T114546C2AB3A508F9ED37813CCD529546E672B8161771DAAF03A4421A5F332A09D3FF71
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

47812

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

E:\nvgpu64-snail\x64\Release\nvgpu_x64.pdb

nvml

nvmlDeviceGetBoardPartNumber nvmlErrorString nvmlDeviceValidateInforom nvmlDeviceGetEncoderUtilization nvmlDeviceGetRetiredPagesPendingStatus nvmlDeviceGetEccMode nvmlDeviceGetMemoryInfo nvmlDeviceGetRetiredPages_v2 nvmlDeviceGetUUID nvmlDeviceGetSerial nvmlDeviceGetTemperature nvmlDeviceGetVirtualizationMode nvmlDeviceGetTotalEccErrors nvmlDeviceGetPerformanceState nvmlDeviceGetProcessUtilization nvmlDeviceGetPowerUsage nvmlDeviceGetPowerManagementLimit nvmlShutdown nvmlDeviceGetPciInfo_v3 nvmlDeviceGetHandleByIndex_v2 nvmlDeviceGetRetiredPages nvmlDeviceGetDecoderUtilization nvmlInit_v2 nvmlDeviceGetClockInfo nvmlDeviceGetName nvmlDeviceGetCount_v2 nvmlSystemGetDriverVersion nvmlDeviceGetUtilizationRates

kernel32

RtlLookupFunctionEntry WriteConsoleW CreateFileW HeapSize GetProcessHeap SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc ReadConsoleW SetFilePointerEx GetFileSizeEx ReadFile GetConsoleMode GetConsoleCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale UnmapViewOfFile CloseHandle OpenFileMappingA MapViewOfFile GetLastError WideCharToMultiByte EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetLastError InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress EncodePointer DecodePointer MultiByteToWideChar CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo RtlCaptureContext RtlUnwind RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwindEx RtlPcToFileHeader RaiseException FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapFree HeapAlloc GetFileType

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-08_2ba8a53f7d7d9d48c71e152cb0fc1ca3_cobalt-strike_hijackloader_icedid_njrat_vidar

nvml

kernel32

generic