2026-01-16_6f28a0b5b785b30b74861605a09d7905_icedid_njrat_vidar[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
2026-01-16_6f28a0b5b785b30b74861605a09d7905_icedid_njrat_vidar.exe
Size 803KB
Sample260820-3dzcssck4w
SHA256 9f1b43e27f4c7568d725108edcff1ff16f15f3fb5e58cabbd101d4daa80bd784
MD5 6f28a0b5b785b30b74861605a09d7905
SHA1 394cd733131fc55073da6933cc167087d8996fc1
SHA512 7727dd21a7b4703bf8b34d298e52180b94a9a66e39f3061f53a0133136eeda3f73ef21d20653e1a79d65e07686940c1600956b4abaccb6a8680127265d445f44
SSDEEP 12288:TWmp8EtUCLwJoMlsRuosDcdI1aT9BNucLSA6TKgweg3FwaYkdBe65Xwzm:KmpBtU8wJaRf5CsxKJpwhd5V
TLSH
T12305F15673E80CF5E8738639CD525905E6327C510731EAAF13A4821ADF77AD0EE3AB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-01-16_6f28a0b5b785b30b74861605a09d7905_icedid_njrat_vidar.exe

File Explorer

2026-01-16_6f28a0b5b785b30b74861605a09d7905_icedid_njrat_vidar.exe

.exe 803KB

2026-01-16_6f28a0b5b785b30b74861605a09d7905_icedid_njrat_vidar.exe

IMPHASH 5affbfe5b36fe853fddd042bfe7c8a25
SHA256 9f1b43e27f4c7568d725108edcff1ff16f15f3fb5e58cabbd101d4daa80bd784
MD5 6f28a0b5b785b30b74861605a09d7905
SHA1 394cd733131fc55073da6933cc167087d8996fc1
SHA512 7727dd21a7b4703bf8b34d298e52180b94a9a66e39f3061f53a0133136eeda3f73ef21d20653e1a79d65e07686940c1600956b4abaccb6a8680127265d445f44
SSDEEP 12288:TWmp8EtUCLwJoMlsRuosDcdI1aT9BNucLSA6TKgweg3FwaYkdBe65Xwzm:KmpBtU8wJaRf5CsxKJpwhd5V
TLSH
T12305F15673E80CF5E8738639CD525905E6327C510731EAAF13A4821ADF77AD0EE3AB21
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

36072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\qb\workspace\ubit\Installers\GFX_Installer\PrInstaller\ASE_Installers\Support\Drv64\x64\Release\Drv64.pdb

kernel32

WriteConsoleW FlushFileBuffers SetFilePointerEx CloseHandle GetLastError CreateFileW SetFilePointer WriteFile LocalFree GetConsoleMode GetConsoleCP HeapSize SetStdHandle GetProcessHeap MultiByteToWideChar WideCharToMultiByte GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetLastError InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress EncodePointer DecodePointer LCMapStringW GetLocaleInfoW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwindEx RtlPcToFileHeader RaiseException FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle GetACP HeapFree HeapAlloc GetFileType IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW

advapi32

RegCloseKey RegSetValueExW RegCreateKeyExW

shell32

CommandLineToArgvW

difxapi

DriverPackagePreinstallW DriverPackageUninstallW DriverPackageGetPathW DIFXAPISetLogCallbackW DriverPackageInstallW

setupapi

SetupDiGetDeviceInstallParamsW SetupDiGetClassDevsW SetupDiGetDeviceRegistryPropertyW SetupDiEnumDeviceInfo SetupDiCallClassInstaller SetupDiSetClassInstallParamsW

newdev

DiInstallDriverW

Name

.text

Size

131KB

Virtual Size

130KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

88KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

568KB

Virtual Size

572KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-01-16_6f28a0b5b785b30b74861605a09d7905_icedid_njrat_vidar.exe

kernel32

advapi32

shell32

difxapi

setupapi

newdev

generic