2026-08-08_e9de44116d890ca2bb12b650325841ec_icedid_njrat_vidar

General

Target
2026-08-08_e9de44116d890ca2bb12b650325841ec_icedid_njrat_vidar
Size 251KB
Sample260809-abm8jaz1bs
SHA256 ec1be57bfb598695be78a13e6a80196f74feb77c3d4c237d863005379bb22a62
MD5 e9de44116d890ca2bb12b650325841ec
SHA1 bb09375b9a068e0e348ab9f3cbbdb86c508c4be3
SHA512 2ee79d6ea9ec2f12202cf2ab9339f311ef8b74af77536fd985f3b0ab9083c30e6f7ccef471f505a1665fd918506332df0d36b6cf78ef3609a5ddb495e863d667
SSDEEP 6144:t5BcnIhRPhvP6LgV3C5oe1y+iq4ijprj:t5yUJX6LsS5fu2jpr
TLSH
T177447D4A72A00CA5EDB7823ECA535A0AE7F2B8420761D7CF0764479BAF17BD0653D721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_e9de44116d890ca2bb12b650325841ec_icedid_njrat_vidar

IMPHASH c2d02fc98f1d75d7b9457468ec75da0e
SHA256 ec1be57bfb598695be78a13e6a80196f74feb77c3d4c237d863005379bb22a62
MD5 e9de44116d890ca2bb12b650325841ec
SHA1 bb09375b9a068e0e348ab9f3cbbdb86c508c4be3
SHA512 2ee79d6ea9ec2f12202cf2ab9339f311ef8b74af77536fd985f3b0ab9083c30e6f7ccef471f505a1665fd918506332df0d36b6cf78ef3609a5ddb495e863d667
SSDEEP 6144:t5BcnIhRPhvP6LgV3C5oe1y+iq4ijprj:t5yUJX6LsS5fu2jpr
TLSH
T177447D4A72A00CA5EDB7823ECA535A0AE7F2B8420761D7CF0764479BAF17BD0653D721
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

20480

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths