2026-08-01_1e1acae1d3f4fc04e2e843cd1ba6899e_akira_icedid_njrat_vidar

General

Target
2026-08-01_1e1acae1d3f4fc04e2e843cd1ba6899e_akira_icedid_njrat_vidar
Size 4.3MB
Sample260801-d82nzavyft
SHA256 40deca1cd33720e0d271837ff98b32bb98cba8f5adffeec0fcba8979c64fa019
MD5 1e1acae1d3f4fc04e2e843cd1ba6899e
SHA1 f9d5d0b6b38ffe82e939993d115143e58691ac84
SHA512 d9b3f51301953472d66bdbd71ed2d243dd26ac44597cd59955d91a5a6e03ad684fafbe6aa8491eef83ac995cbbdbffe1452d2f8b10ff49517307b6eafebbf134
SSDEEP 98304:GI2oEpZbdng3xV9Ng2povvT/jqD527BWG:CBdng3xV/zovL/GVQBWG
TLSH
T18B269D52726C00E9C4B7D138CA568A13E776BC92177086DB92A046395FB7AF06F7F720
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-01_1e1acae1d3f4fc04e2e843cd1ba6899e_akira_icedid_njrat_vidar

File Explorer

2026-08-01_1e1acae1d3f4fc04e2e843cd1ba6899e_akira_icedid_njrat_vidar

.exe 4.3MB

2026-08-01_1e1acae1d3f4fc04e2e843cd1ba6899e_akira_icedid_njrat_vidar

IMPHASH a4d56b567f8c45b6d5a4de8da57beff1
SHA256 40deca1cd33720e0d271837ff98b32bb98cba8f5adffeec0fcba8979c64fa019
MD5 1e1acae1d3f4fc04e2e843cd1ba6899e
SHA1 f9d5d0b6b38ffe82e939993d115143e58691ac84
SHA512 d9b3f51301953472d66bdbd71ed2d243dd26ac44597cd59955d91a5a6e03ad684fafbe6aa8491eef83ac995cbbdbffe1452d2f8b10ff49517307b6eafebbf134
SSDEEP 98304:GI2oEpZbdng3xV9Ng2povvT/jqD527BWG:CBdng3xV/zovL/GVQBWG
TLSH
T18B269D52726C00E9C4B7D138CA568A13E776BC92177086DB92A046395FB7AF06F7F720
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

2466820

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

HeapSize GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindFirstFileExW SetStdHandle GetTimeZoneInformation CreatePipe GetExitCodeProcess SetFilePointerEx GetFileSizeEx SetEndOfFile FlushFileBuffers HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetTimeFormatW GetDateFormatW HeapAlloc ReadConsoleW GetConsoleMode HeapFree SetEnvironmentVariableW GetCommandLineW GetCommandLineA WriteFile GetStdHandle PeekNamedPipe WriteConsoleW GetConsoleOutputCP GetFileType GetFileInformationByHandle CreateFileW GetFullPathNameW GetDriveTypeW GetCurrentDirectoryW SetCurrentDirectoryW ReadFile CreateProcessW CloseHandle GetLastError InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableCS WaitForSingleObject Sleep GetCurrentThread TlsAlloc TlsGetValue TlsSetValue TlsFree QueryPerformanceCounter QueryPerformanceFrequency CreateThread GetModuleHandleA GetProcAddress LoadLibraryA RaiseException GetCurrentProcess TerminateProcess GetSystemTimeAsFileTime CreateDirectoryW DeleteFileW FindClose FindFirstFileW FindNextFileW GetFileAttributesExW RemoveDirectoryW MoveFileW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime FindFirstFileA FreeLibrary ReleaseMutex CreateMutexA WideCharToMultiByte MultiByteToWideChar DuplicateHandle WaitForSingleObjectEx SwitchToThread GetCurrentThreadId EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW GetTickCount GetModuleHandleW CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo SetEvent ResetEvent RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetCurrentProcessId InitializeSListHead CreateTimerQueue SignalObjectAndWait SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait GetThreadTimes FreeLibraryAndExitThread GetModuleFileNameW LoadLibraryExW GetVersionExW VirtualAlloc VirtualProtect VirtualFree ReleaseSemaphore InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList UnregisterWaitEx LoadLibraryW ExitProcess RtlPcToFileHeader RtlUnwindEx ExitThread GetModuleHandleExW RtlUnwind

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-01_1e1acae1d3f4fc04e2e843cd1ba6899e_akira_icedid_njrat_vidar

kernel32

generic