2026-07-31_f242d46d55401ac54510863ac30afca9_icedid_njrat_vidar

General

Target
2026-07-31_f242d46d55401ac54510863ac30afca9_icedid_njrat_vidar
Size 1.2MB
Sample260731-mtltmsgh79
SHA256 67c55f09ad22726dc7695d6ba3d1e0efcc3e7d8f33657017894db622e943f4d5
MD5 f242d46d55401ac54510863ac30afca9
SHA1 4f7d34169d427bd9c0df4006392a609a6e729d8d
SHA512 39675a5a02c15d6a6fc5eb55b542bc8e4a8474e1872024b34a5b8b5f1e5fedd8fb4b74d8d766c4ae17ac8ab8fbd01182b20ba85288f6cbb80c5fd7ec4fa7ef59
SSDEEP 24576:e7FNF/AjsCoSDTbGKV5sqjnhMgeiCl7G0nehbGZpbD:4NF/M9GKV9Dmg27RnWGj
TLSH
T1C545AE291AA1F08CD63237B01989C53557796D3B3D11810EA6817FA63E73F3A1EEF612
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-31_f242d46d55401ac54510863ac30afca9_icedid_njrat_vidar

File Explorer

2026-07-31_f242d46d55401ac54510863ac30afca9_icedid_njrat_vidar

.exe 1.2MB

2026-07-31_f242d46d55401ac54510863ac30afca9_icedid_njrat_vidar

IMPHASH 3e831cff6ab08c01acaea474749ec696
SHA256 67c55f09ad22726dc7695d6ba3d1e0efcc3e7d8f33657017894db622e943f4d5
MD5 f242d46d55401ac54510863ac30afca9
SHA1 4f7d34169d427bd9c0df4006392a609a6e729d8d
SHA512 39675a5a02c15d6a6fc5eb55b542bc8e4a8474e1872024b34a5b8b5f1e5fedd8fb4b74d8d766c4ae17ac8ab8fbd01182b20ba85288f6cbb80c5fd7ec4fa7ef59
SSDEEP 24576:e7FNF/AjsCoSDTbGKV5sqjnhMgeiCl7G0nehbGZpbD:4NF/M9GKV9Dmg27RnWGj
TLSH
T1C545AE291AA1F08CD63237B01989C53557796D3B3D11810EA6817FA63E73F3A1EEF612
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6820

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

BootstrapPackagedGame-Win64-Shipping.pdb

kernel32

GetFileAttributesW CloseHandle GetLastError WaitForSingleObject GetExitCodeProcess CreateProcessW GetModuleFileNameW LoadResource LockResource SizeofResource FindResourceW LoadLibraryW CreateFileW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers HeapReAlloc HeapSize GetProcessHeap LCMapStringW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW WriteConsoleW

user32

wsprintfW MessageBoxW

shell32

ShellExecuteExW

shlwapi

PathCombineW PathRemoveFileSpecW PathCanonicalizeW

Name

.text

Size

61KB

Virtual Size

61KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

40KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

309KB

Virtual Size

308KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.bind

Size

792KB

Virtual Size

796KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-31_f242d46d55401ac54510863ac30afca9_icedid_njrat_vidar

kernel32

user32

shell32

shlwapi

generic