2026-07-30_859f9f62e0b965d3f9e143b96eab6716_icedid_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-30_859f9f62e0b965d3f9e143b96eab6716_icedid_njrat
Size 11.8MB
Sample260730-x1cvesed34
SHA256 fd300a934c7821fd1a56e839844e58d7f7cdcc7b5427293c369fb93201f39c51
MD5 859f9f62e0b965d3f9e143b96eab6716
SHA1 2920236e2db7022590a0ee685e3627d6b68e1ded
SHA512 66bb3bc5a846e16f740d603c1b0133f180bac9cbbb6a6e1fd69a2fbaa05927beec603314c11978bddfb1882193049cabd973437798b7e85082eaf9561f5e8759
SSDEEP 196608:1s17JSE4L3c0+njos7ZnAz6J7Cul06xy1QpwoYdj9GNdAgufJTCv23KrQrg:15nojbZnyuplBw15DdjAdAgICvIxrg
TLSH
T1F6C6231AFBB210E0E5B6C13494B3312AF93278954738A7D796865A0A1F31FE8ED3D741
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_859f9f62e0b965d3f9e143b96eab6716_icedid_njrat

File Explorer

2026-07-30_859f9f62e0b965d3f9e143b96eab6716_icedid_njrat

.exe 11.8MB

2026-07-30_859f9f62e0b965d3f9e143b96eab6716_icedid_njrat

SHA256 fd300a934c7821fd1a56e839844e58d7f7cdcc7b5427293c369fb93201f39c51
MD5 859f9f62e0b965d3f9e143b96eab6716
SHA1 2920236e2db7022590a0ee685e3627d6b68e1ded
SHA512 66bb3bc5a846e16f740d603c1b0133f180bac9cbbb6a6e1fd69a2fbaa05927beec603314c11978bddfb1882193049cabd973437798b7e85082eaf9561f5e8759
SSDEEP 196608:1s17JSE4L3c0+njos7ZnAz6J7Cul06xy1QpwoYdj9GNdAgufJTCv23KrQrg:15nojbZnyuplBw15DdjAdAgICvIxrg
TLSH
T1F6C6231AFBB210E0E5B6C13494B3312AF93278954738A7D796865A0A1F31FE8ED3D741
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

15044696

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

Size

720KB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

72KB

Virtual Size

171KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

102KB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

36KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

116B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

688B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

3KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.winlice

Size

Virtual Size

10.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.boot

Size

6.8MB

Virtual Size

6.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_859f9f62e0b965d3f9e143b96eab6716_icedid_njrat

generic