2026-07-31_edbe0d227216cf705d61f0b0516c8a86_icedid_njrat_vidar

General

Target
2026-07-31_edbe0d227216cf705d61f0b0516c8a86_icedid_njrat_vidar
Size 226KB
Sample260801-bkkdnstyhz
SHA256 6b05e235df4a7d577484787e686e54be6ff27740d6aba56365b987fbbd49a9a3
MD5 edbe0d227216cf705d61f0b0516c8a86
SHA1 65ad442ec267b783c2ef4869a124395057a12790
SHA512 db40e309200b38c4d8e70e1df3c1ee25403a0dd3047a4da673664d9ad272ff4ed32c4d582d984b9ef083b09792e3b1698b6dffff429a6b9f5ba9dcc04aaf7d9f
SSDEEP 3072:SgIblkVBgDGGKVAMD8JSJ/K9nBSE2bngM7nNDNNnPUMEGuaJD7XUY6+WSvm:ST5ABELEJ/KhAE4xNDNNnPj7w
TLSH
T11E347C84B7A154FAF07AC134C97185A7D6727C560B608B9F2394736E9F33690AE3EB10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-31_edbe0d227216cf705d61f0b0516c8a86_icedid_njrat_vidar

File Explorer

2026-07-31_edbe0d227216cf705d61f0b0516c8a86_icedid_njrat_vidar

.exe 226KB

2026-07-31_edbe0d227216cf705d61f0b0516c8a86_icedid_njrat_vidar

IMPHASH 4a02f263fa1b33aa87334d0564252a2c
SHA256 6b05e235df4a7d577484787e686e54be6ff27740d6aba56365b987fbbd49a9a3
MD5 edbe0d227216cf705d61f0b0516c8a86
SHA1 65ad442ec267b783c2ef4869a124395057a12790
SHA512 db40e309200b38c4d8e70e1df3c1ee25403a0dd3047a4da673664d9ad272ff4ed32c4d582d984b9ef083b09792e3b1698b6dffff429a6b9f5ba9dcc04aaf7d9f
SSDEEP 3072:SgIblkVBgDGGKVAMD8JSJ/K9nBSE2bngM7nNDNNnPUMEGuaJD7XUY6+WSvm:ST5ABELEJ/KhAE4xNDNNnPj7w
TLSH
T11E347C84B7A154FAF07AC134C97185A7D6727C560B608B9F2394736E9F33690AE3EB10
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

206848

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

QueryPerformanceCounter QueryPerformanceFrequency GetTickCount RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW HeapSize RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RaiseException GetStdHandle GetFileType GetModuleFileNameW GetModuleHandleExW WriteConsoleW ExitProcess CreateFileW GetFileInformationByHandle CloseHandle PeekNamedPipe SystemTimeToTzSpecificLocalTime FileTimeToSystemTime WriteFile GetCommandLineA GetCommandLineW ReadFile GetConsoleMode ReadConsoleW GetConsoleCP HeapFree HeapAlloc OutputDebugStringW CompareStringW LCMapStringW SetStdHandle HeapReAlloc GetCurrentDirectoryW MultiByteToWideChar FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetStringTypeW GetProcessHeap SetEndOfFile SetFilePointerEx FlushFileBuffers GetFileSizeEx GetTimeZoneInformation

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-31_edbe0d227216cf705d61f0b0516c8a86_icedid_njrat_vidar

kernel32

generic