2026-08-09_8db35ab6dfe52871d5633397cde95a90_icedid_njrat_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_8db35ab6dfe52871d5633397cde95a90_icedid_njrat_vidar
Size 1.8MB
Sample260809-he3rdswtdv
SHA256 5e304a45e67c4b6bbc67b84a849e8a4e56616bcd56007f908ca11c4b2529a2d5
MD5 8db35ab6dfe52871d5633397cde95a90
SHA1 7e8aa0e96cffb672a47a4c1dc57c5c600515c4a4
SHA512 1e25efbf4b12ad53a5d8af1061c904902aaf5a52287c0fcd15f6e3973f00f5ca4312299dd89712ff2ce57eb70b0d661e74e4feb01b5e45c066e0a6687c00d78f
SSDEEP 24576:WaIYoX8cwiN/jc41p3dFxlAXqbhOUe1xTVIlz7X9zOo4PjnikEpx/nLWvJ+GULNz:hYlLlAXEDkSR7Xgo4TiRPnLWvJtgl
TLSH
T17795E00276D045A4D077F13DDA5BCB5AEA7278065BE0A72F03A8565B1F27360BF2A331
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_8db35ab6dfe52871d5633397cde95a90_icedid_njrat_vidar

File Explorer

2026-08-09_8db35ab6dfe52871d5633397cde95a90_icedid_njrat_vidar

.exe 1.8MB

2026-08-09_8db35ab6dfe52871d5633397cde95a90_icedid_njrat_vidar

IMPHASH 048582b31f1042c95a49bdb7b7c91e07
SHA256 5e304a45e67c4b6bbc67b84a849e8a4e56616bcd56007f908ca11c4b2529a2d5
MD5 8db35ab6dfe52871d5633397cde95a90
SHA1 7e8aa0e96cffb672a47a4c1dc57c5c600515c4a4
SHA512 1e25efbf4b12ad53a5d8af1061c904902aaf5a52287c0fcd15f6e3973f00f5ca4312299dd89712ff2ce57eb70b0d661e74e4feb01b5e45c066e0a6687c00d78f
SSDEEP 24576:WaIYoX8cwiN/jc41p3dFxlAXqbhOUe1xTVIlz7X9zOo4PjnikEpx/nLWvJ+GULNz:hYlLlAXEDkSR7Xgo4TiRPnLWvJtgl
TLSH
T17795E00276D045A4D077F13DDA5BCB5AEA7278065BE0A72F03A8565B1F27360BF2A331
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

121896

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Data\svn\autoit\branch_3.3.16\bin\Aut2Exe\Aut2Exe_x64.pdb

comctl32

CreateStatusWindowW InitCommonControlsEx

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

wsock32

gethostname WSAStartup gethostbyname inet_addr WSACleanup

winmm

mciSendStringW timeGetTime

kernel32

GetTempPathW GetTempFileNameW DeleteFileW CopyFileW CreateFileW SetFileTime CloseHandle LoadLibraryA GetProcAddress CreateFileMappingW MapViewOfFile UnmapViewOfFile GetSystemTimeAsFileTime SystemTimeToFileTime GetFileSize GetModuleHandleW GetModuleFileNameW InitializeCriticalSection IsDebuggerPresent lstrcmpiW GetCurrentDirectoryW SetCurrentDirectoryW GetFullPathNameW lstrlenW ReadFile CreateProcessW GetExitCodeProcess Sleep WideCharToMultiByte CompareStringW CompareStringA GetCommandLineW FindResourceW EnumResourceNamesW BeginUpdateResourceW SetFilePointer UpdateResourceW EndUpdateResourceW GetVersionExW IsWow64Process GetCurrentProcess GetSystemInfo DeleteCriticalSection EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount WriteFile DuplicateHandle GetStdHandle CreatePipe CreateThread TerminateThread WaitForSingleObject SetFilePointerEx SetEndOfFile FlushFileBuffers GetLastError GetCurrentThread OpenProcess TerminateProcess CreateToolhelp32Snapshot Process32FirstW Process32NextW GetFileAttributesW FreeLibrary FindClose GetLongPathNameW GetShortPathNameW FindNextFileW CopyFileExW MoveFileW CreateDirectoryW LockResource SetSystemPowerState QueryPerformanceCounter QueryPerformanceFrequency OutputDebugStringW DeviceIoControl LoadLibraryW GetLocalTime GetFileTime IsValidCodePage FindNextFileA FindFirstFileExW FindFirstFileExA SetStdHandle EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW GetTimeFormatW GetDateFormatW GetStringTypeW GetFileType GetConsoleCP HeapAlloc ReadConsoleW GetConsoleMode HeapFree GetACP GetModuleFileNameA ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ResumeThread ExitThread TlsFree TlsSetValue TlsGetValue TlsAlloc EncodePointer SetLastError InterlockedFlushSList InterlockedPushEntrySList RtlUnwind RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetCurrentProcessId GetStartupInfoW CreateEventW WaitForSingleObjectEx ResetEvent SetEvent IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext LoadLibraryExW MultiByteToWideChar GetCurrentThreadId GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetEnvironmentVariableW GetProcessHeap SetConsoleCtrlHandler OutputDebugStringA WriteConsoleW SizeofResource LoadResource RemoveDirectoryW FindResourceExW HeapSize HeapReAlloc FindFirstFileW

user32

GetClassNameW SetActiveWindow CharLowerBuffW EnumThreadWindows FindWindowExW IsWindow EnumChildWindows ExitWindowsEx mouse_event CreateIconFromResourceEx MonitorFromRect MonitorFromPoint GetDC ReleaseDC LoadCursorW GetSystemMenu EndDialog EnableMenuItem DialogBoxParamW MessageBeep GetDlgItemTextW ChildWindowFromPointEx DefWindowProcW SetCursor PostQuitMessage RegisterClassExW LoadIconW LoadImageW IsDialogMessageW DispatchMessageW TranslateMessage TranslateAcceleratorW GetMessageW GetDlgItem SetFocus UpdateWindow SendDlgItemMessageW CheckMenuItem GetMenu CheckMenuRadioItem SetDlgItemTextW CreateDialogParamW LoadAcceleratorsW MessageBoxA DestroyIcon LoadStringW MessageBoxW CharUpperBuffW IsWindowEnabled IsWindowVisible PostMessageW ShowWindow EnableWindow MoveWindow ScreenToClient GetWindowRect InvalidateRect SendMessageW GetParent GetWindowLongPtrW GetWindowThreadProcessId AttachThreadInput SendMessageTimeoutW

gdi32

GetTextExtentPoint32W GetStockObject GetDeviceCaps

comdlg32

GetSaveFileNameW GetOpenFileNameW

advapi32

RegSetValueExW FreeSid CheckTokenMembership AllocateAndInitializeSid InitiateSystemShutdownExW RegOpenKeyExW RegCloseKey RegQueryValueExW RegCreateKeyExW OpenProcessToken AdjustTokenPrivileges OpenThreadToken LookupPrivilegeValueW

shell32

SHFileOperationW DragFinish DragQueryPoint SHGetFolderPathW DragQueryFileW

ole32

CreateStreamOnHGlobal

oleaut32

SafeArrayGetVartype SysFreeString VarR8FromDec VariantTimeToSystemTime SafeArrayDestroyDescriptor SafeArrayDestroyData SafeArrayUnaccessData SafeArrayAccessData SafeArrayAllocData SafeArrayAllocDescriptorEx VariantInit SysAllocString VariantCopy VariantClear SafeArrayCreateVector

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_8db35ab6dfe52871d5633397cde95a90_icedid_njrat_vidar

comctl32

version

wsock32

winmm

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

generic