2026-08-08_669f5ee7c6ce3097ba9ae9b4e6fa075e_icedid_njrat_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-08_669f5ee7c6ce3097ba9ae9b4e6fa075e_icedid_njrat_vidar
Size 181KB
Sample260808-lzvs3avape
SHA256 b9f755ad141c80aa791ee38165353c1d32a27e6faedaf5e8370d92f89885853f
MD5 669f5ee7c6ce3097ba9ae9b4e6fa075e
SHA1 3505d3e14e533759506d72cad21c5d96c35f154a
SHA512 8e452ee317f4c30720e453bdf761ff0e82c928ca449204fccf61d895cc5c3b86166e24f046c6e62b87fb8854223554c5fd97c4353ee3fe3101c5b585d0910764
SSDEEP 3072:79DYuvOBYq5eMLK4KJW5k9lEzpB1qpvfqyWQaPkr/yh5DEU/P:79l2bOR9GkbHaz5Y6
TLSH
T194042B7462542269E0237134997FDF2F96B27C4B2720BA3F135C7F9A1F32241A925BB1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_669f5ee7c6ce3097ba9ae9b4e6fa075e_icedid_njrat_vidar

File Explorer

2026-08-08_669f5ee7c6ce3097ba9ae9b4e6fa075e_icedid_njrat_vidar

.exe 181KB

2026-08-08_669f5ee7c6ce3097ba9ae9b4e6fa075e_icedid_njrat_vidar

IMPHASH d0c8bc1d46b98585bb95ef6acdf646ab
SHA256 b9f755ad141c80aa791ee38165353c1d32a27e6faedaf5e8370d92f89885853f
MD5 669f5ee7c6ce3097ba9ae9b4e6fa075e
SHA1 3505d3e14e533759506d72cad21c5d96c35f154a
SHA512 8e452ee317f4c30720e453bdf761ff0e82c928ca449204fccf61d895cc5c3b86166e24f046c6e62b87fb8854223554c5fd97c4353ee3fe3101c5b585d0910764
SSDEEP 3072:79DYuvOBYq5eMLK4KJW5k9lEzpB1qpvfqyWQaPkr/yh5DEU/P:79l2bOR9GkbHaz5Y6
TLSH
T194042B7462542269E0237134997FDF2F96B27C4B2720BA3F135C7F9A1F32241A925BB1
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

29268

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comctl32

InitCommonControlsEx

kernel32

CreateFileW WriteConsoleW FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP HeapReAlloc HeapSize SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindNextFileW FindFirstFileExW FindClose LCMapStringW GetStringTypeW GetFileType HeapAlloc HeapFree GetACP WriteFile GetStdHandle WideCharToMultiByte GetModuleFileNameW GetModuleHandleExW ExitProcess LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection SetLastError GetLastError RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter CloseHandle VirtualFreeEx ReadProcessMemory VirtualAllocEx OpenProcess GlobalUnlock GlobalLock MulDiv GlobalAlloc FreeLibrary GetModuleHandleW GetProcAddress LoadLibraryW MultiByteToWideChar GetCurrentThreadId RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW

user32

GetClassNameW SendMessageTimeoutW AttachThreadInput GetWindowThreadProcessId GetWindowLongPtrW GetParent InvalidateRect GetCursor GetDesktopWindow RedrawWindow GetWindowDC IsWindow GetWindow ChildWindowFromPointEx ClientToScreen EnumChildWindows GetWindowTextW GetDlgCtrlID GetWindowLongW GetForegroundWindow WindowFromPoint CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ReleaseCapture SendDlgItemMessageW SetCapture SetCursor EndDeferWindowPos DeferWindowPos BeginDeferWindowPos DefWindowProcW MessageBoxW DestroyWindow KillTimer PostQuitMessage GetWindowPlacement RegisterClassExW LoadIconW DispatchMessageW TranslateMessage IsDialogMessageW GetMessageW SetTimer GetClientRect SetWindowTextW SetWindowPos GetMenu CheckMenuItem LoadCursorW LoadImageW RegisterWindowMessageW RegisterHotKey CreateWindowExW DestroyIcon GetCursorPos ReleaseDC GetDC MonitorFromPoint IsWindowVisible ShowWindow EnableWindow MoveWindow ScreenToClient GetWindowRect SendMessageW

gdi32

DeleteDC BitBlt LineTo MoveToEx StretchBlt PatBlt CreateCompatibleBitmap CreateCompatibleDC Rectangle SetROP2 GetStockObject SelectObject CreatePen GetPixel DeleteObject CreateFontW GetDeviceCaps

comdlg32

ChooseColorW

advapi32

RegOpenKeyExW RegCloseKey RegSetValueExW RegCreateKeyExW RegQueryValueExW

Name

.text

Size

82KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

46KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

2KB

Virtual Size

824KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

43KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_669f5ee7c6ce3097ba9ae9b4e6fa075e_icedid_njrat_vidar

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

generic