2026-08-02_aef58451f995157c4c8bf041ba5af2ff_icedid_njrat_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-02_aef58451f995157c4c8bf041ba5af2ff_icedid_njrat_vidar
Size 231KB
Sample260802-c8nlnssfmd
SHA256 4aaf0eae9add0b8795cba0c0b8796a4bed56188a756b5a46e244773f74382556
MD5 aef58451f995157c4c8bf041ba5af2ff
SHA1 00c5a2bed0a3ebfc31cf4ce20eab8192f9d945ad
SHA512 e9edb87cf78cdd13d8a1776a548eaca3f35452738318a1a1e5f25b332a54349d4f05cc0ac15ec6771c1cc4606fca96d4d501315b5099a5e6208adada77a1aca5
SSDEEP 3072:+RCEGYx6KAMoBl5QMLfXvYS6skcl91g9QnvGqyWQ93kr/yh5DEU/P5kP0zJxkhq1:+gElxgFZ7vHWcNxcH9b5Y651zbza9K
TLSH
T17C347C93729024EAE4637534A91FC72F67717C6B0B20AB3B135C7F6A5E232815D29B31
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_aef58451f995157c4c8bf041ba5af2ff_icedid_njrat_vidar

File Explorer

2026-08-02_aef58451f995157c4c8bf041ba5af2ff_icedid_njrat_vidar

.exe 231KB

2026-08-02_aef58451f995157c4c8bf041ba5af2ff_icedid_njrat_vidar

IMPHASH d0c8bc1d46b98585bb95ef6acdf646ab
SHA256 4aaf0eae9add0b8795cba0c0b8796a4bed56188a756b5a46e244773f74382556
MD5 aef58451f995157c4c8bf041ba5af2ff
SHA1 00c5a2bed0a3ebfc31cf4ce20eab8192f9d945ad
SHA512 e9edb87cf78cdd13d8a1776a548eaca3f35452738318a1a1e5f25b332a54349d4f05cc0ac15ec6771c1cc4606fca96d4d501315b5099a5e6208adada77a1aca5
SSDEEP 3072:+RCEGYx6KAMoBl5QMLfXvYS6skcl91g9QnvGqyWQ93kr/yh5DEU/P5kP0zJxkhq1:+gElxgFZ7vHWcNxcH9b5Y651zbza9K
TLSH
T17C347C93729024EAE4637534A91FC72F67717C6B0B20AB3B135C7F6A5E232815D29B31
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

29268

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comctl32

InitCommonControlsEx

kernel32

CreateFileW WriteConsoleW FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP HeapReAlloc HeapSize SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindNextFileW FindFirstFileExW FindClose LCMapStringW GetStringTypeW GetFileType HeapAlloc HeapFree GetACP WriteFile GetStdHandle WideCharToMultiByte GetModuleFileNameW GetModuleHandleExW ExitProcess LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection SetLastError GetLastError RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter CloseHandle VirtualFreeEx ReadProcessMemory VirtualAllocEx OpenProcess GlobalUnlock GlobalLock MulDiv GlobalAlloc FreeLibrary GetModuleHandleW GetProcAddress LoadLibraryW MultiByteToWideChar GetCurrentThreadId RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW

user32

GetClassNameW SendMessageTimeoutW AttachThreadInput GetWindowThreadProcessId GetWindowLongPtrW GetParent InvalidateRect GetCursor GetDesktopWindow RedrawWindow GetWindowDC IsWindow GetWindow ChildWindowFromPointEx ClientToScreen EnumChildWindows GetWindowTextW GetDlgCtrlID GetWindowLongW GetForegroundWindow WindowFromPoint CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ReleaseCapture SendDlgItemMessageW SetCapture SetCursor EndDeferWindowPos DeferWindowPos BeginDeferWindowPos DefWindowProcW MessageBoxW DestroyWindow KillTimer PostQuitMessage GetWindowPlacement RegisterClassExW LoadIconW DispatchMessageW TranslateMessage IsDialogMessageW GetMessageW SetTimer GetClientRect SetWindowTextW SetWindowPos GetMenu CheckMenuItem LoadCursorW LoadImageW RegisterWindowMessageW RegisterHotKey CreateWindowExW DestroyIcon GetCursorPos ReleaseDC GetDC MonitorFromPoint IsWindowVisible ShowWindow EnableWindow MoveWindow ScreenToClient GetWindowRect SendMessageW

gdi32

DeleteDC BitBlt LineTo MoveToEx StretchBlt PatBlt CreateCompatibleBitmap CreateCompatibleDC Rectangle SetROP2 GetStockObject SelectObject CreatePen GetPixel DeleteObject CreateFontW GetDeviceCaps

comdlg32

ChooseColorW

advapi32

RegOpenKeyExW RegCloseKey RegSetValueExW RegCreateKeyExW RegQueryValueExW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-02_aef58451f995157c4c8bf041ba5af2ff_icedid_njrat_vidar

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

generic