2026-08-07_97d3b3c0b737a03d55f936717f5a8a3f_icedid_njrat_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-07_97d3b3c0b737a03d55f936717f5a8a3f_icedid_njrat_vidar
Size 181KB
Sample260807-l1995ssdnb
SHA256 55fd2a5e4f18d0aa9f7a838667ca8b96d9d8327d52bbd5e531868fe2290a5fc4
MD5 97d3b3c0b737a03d55f936717f5a8a3f
SHA1 0454dd2249709415c47b82758f55d8c3910548d6
SHA512 6e9478e51b48f22ec5144bae6d2c9cc19c1cdd7d0ba24a0cd54086bb105dc3f936240ec261ddd04a552f364853ff57615813a9810d20d7d650af5cd87e8dee11
SSDEEP 3072:uu0euvmBXewML5JmYwuTKlwCHV0nvJqyWQTnkr/yh5DEU/P:uxSejf9KX+PHTr5Y6
TLSH
T145042A546254206AE023F134AD5FD72F92B67C4B0B20BA3F235C7F1A5F372A16925B31
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-07_97d3b3c0b737a03d55f936717f5a8a3f_icedid_njrat_vidar

File Explorer

2026-08-07_97d3b3c0b737a03d55f936717f5a8a3f_icedid_njrat_vidar

.exe 181KB

2026-08-07_97d3b3c0b737a03d55f936717f5a8a3f_icedid_njrat_vidar

IMPHASH d0c8bc1d46b98585bb95ef6acdf646ab
SHA256 55fd2a5e4f18d0aa9f7a838667ca8b96d9d8327d52bbd5e531868fe2290a5fc4
MD5 97d3b3c0b737a03d55f936717f5a8a3f
SHA1 0454dd2249709415c47b82758f55d8c3910548d6
SHA512 6e9478e51b48f22ec5144bae6d2c9cc19c1cdd7d0ba24a0cd54086bb105dc3f936240ec261ddd04a552f364853ff57615813a9810d20d7d650af5cd87e8dee11
SSDEEP 3072:uu0euvmBXewML5JmYwuTKlwCHV0nvJqyWQTnkr/yh5DEU/P:uxSejf9KX+PHTr5Y6
TLSH
T145042A546254206AE023F134AD5FD72F92B67C4B0B20BA3F235C7F1A5F372A16925B31
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

29268

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comctl32

InitCommonControlsEx

kernel32

CreateFileW WriteConsoleW FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP HeapReAlloc HeapSize SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindNextFileW FindFirstFileExW FindClose LCMapStringW GetStringTypeW GetFileType HeapAlloc HeapFree GetACP WriteFile GetStdHandle WideCharToMultiByte GetModuleFileNameW GetModuleHandleExW ExitProcess LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection SetLastError GetLastError RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter CloseHandle VirtualFreeEx ReadProcessMemory VirtualAllocEx OpenProcess GlobalUnlock GlobalLock MulDiv GlobalAlloc FreeLibrary GetModuleHandleW GetProcAddress LoadLibraryW MultiByteToWideChar GetCurrentThreadId RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW

user32

GetClassNameW SendMessageTimeoutW AttachThreadInput GetWindowThreadProcessId GetWindowLongPtrW GetParent InvalidateRect GetCursor GetDesktopWindow RedrawWindow GetWindowDC IsWindow GetWindow ChildWindowFromPointEx ClientToScreen EnumChildWindows GetWindowTextW GetDlgCtrlID GetWindowLongW GetForegroundWindow WindowFromPoint CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ReleaseCapture SendDlgItemMessageW SetCapture SetCursor EndDeferWindowPos DeferWindowPos BeginDeferWindowPos DefWindowProcW MessageBoxW DestroyWindow KillTimer PostQuitMessage GetWindowPlacement RegisterClassExW LoadIconW DispatchMessageW TranslateMessage IsDialogMessageW GetMessageW SetTimer GetClientRect SetWindowTextW SetWindowPos GetMenu CheckMenuItem LoadCursorW LoadImageW RegisterWindowMessageW RegisterHotKey CreateWindowExW DestroyIcon GetCursorPos ReleaseDC GetDC MonitorFromPoint IsWindowVisible ShowWindow EnableWindow MoveWindow ScreenToClient GetWindowRect SendMessageW

gdi32

DeleteDC BitBlt LineTo MoveToEx StretchBlt PatBlt CreateCompatibleBitmap CreateCompatibleDC Rectangle SetROP2 GetStockObject SelectObject CreatePen GetPixel DeleteObject CreateFontW GetDeviceCaps

comdlg32

ChooseColorW

advapi32

RegOpenKeyExW RegCloseKey RegSetValueExW RegCreateKeyExW RegQueryValueExW

Name

.text

Size

82KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

46KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

2KB

Virtual Size

824KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

43KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-07_97d3b3c0b737a03d55f936717f5a8a3f_icedid_njrat_vidar

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

generic