2026-07-10_898704150587c832aac331cede7ca450_cobalt-strike_icedid_njrat

General

Target
2026-07-10_898704150587c832aac331cede7ca450_cobalt-strike_icedid_njrat
Size 240KB
Sample260710-fxpldaex7y
SHA256 b3b96ee89e6e46929bf95c31ffd4018e7ed373b783fdffcb29ed7b410dc4bb65
MD5 898704150587c832aac331cede7ca450
SHA1 e91025cbf9aeed41b60e6d07d854992e8612b57d
SHA512 3c4344c08e8a78d1be7f4f349bc19b51370fdfcb52fa469e20693ee5b853d8a24bec285a31c9fb398ecf4264eec469d252afcd7494cb92127a4e917c6a079da4
SSDEEP 6144:0YFKw41l5m5cLQru++++Ev4aecohOuandc+P1:nFKwCm5cMH/hUandc
TLSH
T1F1345B5BB3E530F9E1B7867885910646E772B83517205FEF03A4426A2F272D09E3EF61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-10_898704150587c832aac331cede7ca450_cobalt-strike_icedid_njrat

File Explorer

2026-07-10_898704150587c832aac331cede7ca450_cobalt-strike_icedid_njrat

.exe 240KB

2026-07-10_898704150587c832aac331cede7ca450_cobalt-strike_icedid_njrat

IMPHASH f078d225ef2cc6be709dd83bb12164db
SHA256 b3b96ee89e6e46929bf95c31ffd4018e7ed373b783fdffcb29ed7b410dc4bb65
MD5 898704150587c832aac331cede7ca450
SHA1 e91025cbf9aeed41b60e6d07d854992e8612b57d
SHA512 3c4344c08e8a78d1be7f4f349bc19b51370fdfcb52fa469e20693ee5b853d8a24bec285a31c9fb398ecf4264eec469d252afcd7494cb92127a4e917c6a079da4
SSDEEP 6144:0YFKw41l5m5cLQru++++Ev4aecohOuandc+P1:nFKwCm5cMH/hUandc
TLSH
T1F1345B5BB3E530F9E1B7867885910646E772B83517205FEF03A4426A2F272D09E3EF61
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5536

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

ShellExecuteA

user32

wsprintfA

kernel32

IsProcessorFeaturePresent WriteConsoleW CreateFileW CreateFileA WriteFile GetTempPathA CloseHandle Sleep CreateProcessA GetTickCount GetModuleFileNameA LoadResource LockResource SizeofResource FindResourceA MoveFileExA QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW RtlUnwindEx GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader GetStdHandle GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetProcAddress RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW VirtualProtect LoadLibraryExW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-10_898704150587c832aac331cede7ca450_cobalt-strike_icedid_njrat

shell32

user32

kernel32

generic