2026-08-08_0b007694a23b8c45ae3e3142b5d65572_icedid_njrat_vidar

General

Target
2026-08-08_0b007694a23b8c45ae3e3142b5d65572_icedid_njrat_vidar
Size 251KB
Sample260809-apr4msfl5v
SHA256 dbf1df36ef8f218e9cd7cff7de67faa87340dbf7b8917325cab0acb05957f622
MD5 0b007694a23b8c45ae3e3142b5d65572
SHA1 d043b710f45ef74b35018623c4826c63cf80b6e8
SHA512 62ea47702c1d55040e38ecefaea95baee5c8cfdd45c25be07fe942c34750ce825de76a78586acd96c3fedd2558d213a277a41086594f00690b1cefebcd9a53b9
SSDEEP 6144:I5BcnIhRPhvP6LgV3C5oe1y+iq4ijprj:I5yUJX6LsS5fu2jpr
TLSH
T1DD447D4A72A00CA5EDB7823ECA535A0AE7F2B8420761D7CF0764479BAF17BD0653D721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_0b007694a23b8c45ae3e3142b5d65572_icedid_njrat_vidar

IMPHASH c2d02fc98f1d75d7b9457468ec75da0e
SHA256 dbf1df36ef8f218e9cd7cff7de67faa87340dbf7b8917325cab0acb05957f622
MD5 0b007694a23b8c45ae3e3142b5d65572
SHA1 d043b710f45ef74b35018623c4826c63cf80b6e8
SHA512 62ea47702c1d55040e38ecefaea95baee5c8cfdd45c25be07fe942c34750ce825de76a78586acd96c3fedd2558d213a277a41086594f00690b1cefebcd9a53b9
SSDEEP 6144:I5BcnIhRPhvP6LgV3C5oe1y+iq4ijprj:I5yUJX6LsS5fu2jpr
TLSH
T1DD447D4A72A00CA5EDB7823ECA535A0AE7F2B8420761D7CF0764479BAF17BD0653D721
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

20480

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths