2026-07-10_0bafb14cd1fc0765557d5922b69ebea3_cobalt-strike_icedid_njrat

General

Target
2026-07-10_0bafb14cd1fc0765557d5922b69ebea3_cobalt-strike_icedid_njrat
Size 426KB
Sample260710-bvpfdacz3t
SHA256 63a9df612e56b5ce7645393251e9adbf2291a4e959f743e3eb962a4b0f28904c
MD5 0bafb14cd1fc0765557d5922b69ebea3
SHA1 e52475bb0d10ca0181763c6bc5929229f51ba262
SHA512 0bb2e576f347ff30a991bb7911223246e77cc1b41396c74f2cc3f3e64d3724d05096bb60d8729020581e918eb7c018d9874fff3a78e95ba055580af7c6aae4bd
SSDEEP 6144:JXW9ZNeikh1O8ndkJXejEa2k0aiApP/3gRIBTyw/BB5V7l4NNT:Q9DeaBXOEK0JYhysBLWjT
TLSH
T1A5940141B3C94ED7E0B30A38845E0B947539BD540721CF2A628CF1397F1A6999FA6FE1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-10_0bafb14cd1fc0765557d5922b69ebea3_cobalt-strike_icedid_njrat

File Explorer

2026-07-10_0bafb14cd1fc0765557d5922b69ebea3_cobalt-strike_icedid_njrat

.exe 426KB

2026-07-10_0bafb14cd1fc0765557d5922b69ebea3_cobalt-strike_icedid_njrat

IMPHASH e1749d3545e611e4d9029f7a4e8737a4
SHA256 63a9df612e56b5ce7645393251e9adbf2291a4e959f743e3eb962a4b0f28904c
MD5 0bafb14cd1fc0765557d5922b69ebea3
SHA1 e52475bb0d10ca0181763c6bc5929229f51ba262
SHA512 0bb2e576f347ff30a991bb7911223246e77cc1b41396c74f2cc3f3e64d3724d05096bb60d8729020581e918eb7c018d9874fff3a78e95ba055580af7c6aae4bd
SSDEEP 6144:JXW9ZNeikh1O8ndkJXejEa2k0aiApP/3gRIBTyw/BB5V7l4NNT:Q9DeaBXOEK0JYhysBLWjT
TLSH
T1A5940141B3C94ED7E0B30A38845E0B947539BD540721CF2A628CF1397F1A6999FA6FE1
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

187696

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

bba.bdn

GVLNABMmgKGdoovbelP FADSrLMlVMCv FyrWJGsOvyepQqfLloWbsbzxZ aWvpwBzVFBPrPwByNIG kNMwlinxszLmYnknCgigWic doJUOKSYZLQu tsObJcXClRFMgyatFyGw VUExIrjQNJnofDoTHhWX AwxJIKPBRyShovyPQJxtE vdFDdYGKgDQ WaAoSeOgxontPriOVxjJyxPQu LeNneozMyWQJwhutz RCBQGDdSjUvKleaUwwFZSh zdaAMKFJRAbugIpw CRGxQHCLqinbRBQfFnxxKJso yqoRufJqWtaFKnXCMkJYPKEbhlF sZIWTOqOBfblEeDbg onYEGiCVnDIAzDKY WrGmAMOoQPlJuZitrvc otiqDXAInlqpAAqcci XNJEPaTvcGtcKezTPXgDqbf WRilPsVrKVyqYTmVKGx BgbFtCHXwZWGXTYtg NgDLcmjXcXKmsgK PiOlbGWXEGFZzCNy MoOPyunfZZGD NaHVmmlpTkl UgmaoRnUIdyw qSosGLATpkyjQlvNwwjvcSZgEeCbOZNiBNokn hXZVcDIq YjowaXzTpEu KrZBnlHeYjf AgaPlpm ohTxsdOcsEb AWSiIVMCFGfemH OFRBeuJHsGNOdB nkaTrmgMdFIHV tHooaAiTqUbYKI NSFKqTrnCYomHpTRu divzPPqtpDEQXqUN PwsSDZgcqOX MVvvWNWmmlVjm recylgCWmwzsjNbnSQTgqUeKDQ AbNNmMNgRrn SePrSOxrAEuWV RcOKIFAmyBwlEEAiGOhjvZYEZHCdQTZ hWOSsqlsDnsVtAHFxQhg AJpLEbCdFsN nDfeEFPLVUgRnekP vuFvmMSXeFl sVBJXdhZ RuEjTcedbSL jfloXcVrzNbYOAqUXh ZZlQaMWoLSCU nIXuGBZRz MPivdBiCihUtKLTeZh KPKTcROsJNihdek YHJKZlzkkJZgGOq kATApUPYX LPUwAgNd rHpVMuPK kgbpIaLuEPG gXjpmJTDmHd zMobbrm UxtEYIPwnQFFaX MrOSPJZwIdIa JPzeoSxDiZFnUL OxqtjtsSZlgHJ OESgBzEGowoQOFNsiq IlStNrlLkDDdjwGtbu HcGYCeRmONkafgkMpyOG StvwxXEPJAejTXQI OjyOgBjscmzR IbqzQfBZrnVktRyx yVezNIANNubjVSWNEn WrEArLAABXALvU wqMcvlfCChqIA ZYAWnQmktbNzGPmI paOwDPRHWtLi FlpAHyQAjRl PoxFNfZEf fIFiKPPgcNhJhvjB kFrtutUQxuqeo YJHRmnwbJiAXsrK aplYPS NLcHgFLO DdRyQZCEv kdRlkrUdYYagpBfNCmGJnN JZexdamLwBtLWBGhxSZLrbL PLJADGtvcYSnWtdkcdcbABM BQpZKohNUSLSQZ AkzIzPFPmLINxY QcjByRuuIpxbAJdhDuzmjk HnnvAUiV HBRRjsdfbMDTr

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-10_0bafb14cd1fc0765557d5922b69ebea3_cobalt-strike_icedid_njrat

bba.bdn

generic