2026-08-05_25c197ea5545e92d4703f57e4db6da04_icedid_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-05_25c197ea5545e92d4703f57e4db6da04_icedid_njrat
Size 1.3MB
Sample260805-qf18ysgn21
SHA256 8ad2752d467b75655a873f22fec8ddd52291f1a08d2f945d4cd0c6143ab827f4
MD5 25c197ea5545e92d4703f57e4db6da04
SHA1 bd2fb1342e7a7aedd029392f500de86ccafb623f
SHA512 3b9da4ed3c29ffd4bacd125cb7adb01226eebd70f5b4721c1e99b702ca195b53abf6f4f6166daa20ca1f3ab5831c250314f62e1e6e785668e36b6e1d154f250d
SSDEEP 12288:xf2eZq3fZ9EdamOoYCKG83ax7DmADwOf33oiXhh3ML+E+DzeKXl:92eZq3fnKgzOf33p33EW
TLSH
T10855B54BE7B611D1F4BAC2399562322AFC7234A5873897D752859A0E4B30FE4ED3E710
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-05_25c197ea5545e92d4703f57e4db6da04_icedid_njrat

File Explorer

2026-08-05_25c197ea5545e92d4703f57e4db6da04_icedid_njrat

.exe 1.3MB

2026-08-05_25c197ea5545e92d4703f57e4db6da04_icedid_njrat

IMPHASH ad796c6918540cf5b4cb2a0ed1e739a8
SHA256 8ad2752d467b75655a873f22fec8ddd52291f1a08d2f945d4cd0c6143ab827f4
MD5 25c197ea5545e92d4703f57e4db6da04
SHA1 bd2fb1342e7a7aedd029392f500de86ccafb623f
SHA512 3b9da4ed3c29ffd4bacd125cb7adb01226eebd70f5b4721c1e99b702ca195b53abf6f4f6166daa20ca1f3ab5831c250314f62e1e6e785668e36b6e1d154f250d
SSDEEP 12288:xf2eZq3fZ9EdamOoYCKG83ax7DmADwOf33oiXhh3ML+E+DzeKXl:92eZq3fnKgzOf33p33EW
TLSH
T10855B54BE7B611D1F4BAC2399562322AFC7234A5873897D752859A0E4B30FE4ED3E710
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

506576

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\mingi\OneDrive\바탕 화면\no_defender\free_develop\CVE-2021-1732-Exploit\x64\Debug\ExploitTest.pdb

kernel32

ReadFile CloseHandle GetLastError CreatePipe GetCurrentProcessId CreateProcessW GetStartupInfoW VirtualProtect VirtualQuery GetModuleHandleA GetModuleHandleW GetProcAddress LoadLibraryA LocalAlloc lstrcpyW CreateFileW ReadConsoleW SetFilePointerEx GetFileSizeEx HeapQueryInformation HeapReAlloc GetStringTypeW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetCurrentThreadId IsDebuggerPresent RaiseException MultiByteToWideChar WideCharToMultiByte QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter HeapAlloc HeapFree GetProcessHeap FreeLibrary RtlUnwindEx InterlockedPushEntrySList InterlockedFlushSList GetModuleFileNameW LoadLibraryExW SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RtlPcToFileHeader GetCurrentProcess TerminateProcess GetModuleHandleExW GetStdHandle WriteFile ExitProcess GetCommandLineA GetCommandLineW HeapSize HeapValidate GetSystemInfo IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter GetTempPathW IsThreadAFiber GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetCurrentThread FlushFileBuffers GetConsoleOutputCP GetConsoleMode WaitForSingleObject GetExitCodeProcess GetFileAttributesExW OutputDebugStringW WriteConsoleW SetConsoleCtrlHandler FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP RtlUnwind

user32

SetWindowLongPtrA SetWindowLongW CreatePopupMenu CreateMenu GetMenuBarInfo CreateWindowExW RegisterClassExW PostQuitMessage DefWindowProcW DestroyWindow

Name

.textbss

Size

Virtual Size

477KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

1014KB

Virtual Size

1013KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

215KB

Virtual Size

214KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

46KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.msvcjmc

Size

512B

Virtual Size

494B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

373B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

1024B

Virtual Size

563B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-05_25c197ea5545e92d4703f57e4db6da04_icedid_njrat

kernel32

user32

generic