2026-08-20_686a05ba3c5f57e9b50f344fbfb489d0_icedid_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-20_686a05ba3c5f57e9b50f344fbfb489d0_icedid_njrat
Size 1.4MB
Sample260821-dffk2avyfv
SHA256 04d61817e2ae782f27cf6801e335e270e6b6d2e2daeb2b4582fffe727d707f4c
MD5 686a05ba3c5f57e9b50f344fbfb489d0
SHA1 59ef420a0ad0a341b6de4c346bda2dd0d6a7a157
SHA512 cc722e3579c4e0cdba48e985a36931a22cb6de457c3450fc1a2e6573caa5bc43e19f79bf07ead1eb77f347d396ee671b8ab5bd8ad8d2e46ff317c6fa70f4316e
SSDEEP 12288:Acn98ptOlAWsI5BqzWv5mMTGeysVXku+TuiXhy2u/VUs1u26h:LgtOlAWNfXH+T82iRC
TLSH
T1C765B54BF7B610D1F5BAC239A552223AFC7134A587389BD792858A0E5B30BE4ED3D704
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_686a05ba3c5f57e9b50f344fbfb489d0_icedid_njrat

File Explorer

2026-08-20_686a05ba3c5f57e9b50f344fbfb489d0_icedid_njrat

.exe 1.4MB

2026-08-20_686a05ba3c5f57e9b50f344fbfb489d0_icedid_njrat

IMPHASH ffcf1fc1430b2958a0edcfe28f8984ea
SHA256 04d61817e2ae782f27cf6801e335e270e6b6d2e2daeb2b4582fffe727d707f4c
MD5 686a05ba3c5f57e9b50f344fbfb489d0
SHA1 59ef420a0ad0a341b6de4c346bda2dd0d6a7a157
SHA512 cc722e3579c4e0cdba48e985a36931a22cb6de457c3450fc1a2e6573caa5bc43e19f79bf07ead1eb77f347d396ee671b8ab5bd8ad8d2e46ff317c6fa70f4316e
SSDEEP 12288:Acn98ptOlAWsI5BqzWv5mMTGeysVXku+TuiXhy2u/VUs1u26h:LgtOlAWNfXH+T82iRC
TLSH
T1C765B54BF7B610D1F5BAC239A552223AFC7134A587389BD792858A0E5B30BE4ED3D704
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

530753

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\notdezzi\Desktop\camel-bot\build\loader.pdb

wininet

InternetCloseHandle InternetConnectA InternetReadFile InternetSetOptionW HttpOpenRequestA HttpSendRequestA HttpQueryInfoA InternetOpenA

gdiplus

GdipDeleteFont GdipCreateFont GdipGetGenericFontFamilySansSerif GdipDeleteFontFamily GdipCreateFontFamilyFromName GdipResetClip GdipSetClipPath GdipDrawImageRectI GdipFillPath GdipFillRectangleI GdipDrawPath GdipSetTextRenderingHint GdipSetSmoothingMode GdipDeleteGraphics GdipCreateFromHDC GdipCreateBitmapFromStreamICM GdipCreateBitmapFromStream GdipCreateStringFormat GdipGetImageWidth GdipDisposeImage GdipCloneImage GdipDeletePen GdipCreatePen1 GdipCreateLineBrushI GdipCreateSolidFill GdipDeleteBrush GdipCloneBrush GdipAddPathArc GdipClosePathFigure GdipDeletePath GdipCreatePath GdiplusShutdown GdiplusStartup GdipFree GdipAlloc GdipDrawString GdipDeleteStringFormat GdipSetStringFormatAlign GdipSetStringFormatLineAlign GdipGetImageHeight

ole32

CreateStreamOnHGlobal CoInitializeEx

kernel32

GetConsoleOutputCP FlushFileBuffers HeapQueryInformation HeapReAlloc GetStringTypeW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose SetConsoleCtrlHandler WriteConsoleW OutputDebugStringW GetCurrentThread GetFileType EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect IsThreadAFiber GetTempPathW UnhandledExceptionFilter RtlVirtualUnwind RtlCaptureContext IsProcessorFeaturePresent GetSystemInfo HeapValidate HeapSize GetCommandLineW GetCommandLineA ExitProcess GetStdHandle GetModuleHandleExW GetCurrentProcess CreateFileA DeleteFileA GetConsoleMode CloseHandle WaitForSingleObject TerminateProcess CreateThread ResumeThread CreateProcessA GetThreadContext SetThreadContext FlushInstructionCache VirtualProtectEx ReadProcessMemory WriteProcessMemory GetModuleFileNameA GetModuleHandleA GetProcAddress MultiByteToWideChar InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection GetModuleHandleW GlobalAlloc GlobalUnlock GlobalLock GlobalFree FlsSetValue FlsGetValue FlsAlloc SetLastError LoadLibraryExW GetModuleFileNameW InterlockedFlushSList InterlockedPushEntrySList RtlUnwindEx RtlLookupFunctionEntry RtlPcToFileHeader FreeLibrary VirtualQuery GetProcessHeap HeapFree HeapAlloc GetLastError GetStartupInfoW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime EncodePointer CreateFileW GetFileSizeEx SetFilePointerEx ReadFile ReadConsoleW SetEndOfFile WriteFile RtlUnwind InitializeCriticalSectionEx GetCurrentThreadId IsDebuggerPresent RaiseException WideCharToMultiByte QueryPerformanceCounter GetCurrentProcessId FlsFree SetConsoleTitleA

user32

GetClientRect InvalidateRect SetWindowRgn EndPaint BeginPaint UpdateWindow GetSystemMetrics KillTimer LoadCursorW DestroyWindow CreateWindowExW RegisterClassExW PostQuitMessage DefWindowProcW PostMessageW DispatchMessageW TranslateMessage GetMessageW SetTimer SetProcessDPIAware

gdi32

DeleteObject DeleteDC CreateRoundRectRgn CreateCompatibleDC CreateCompatibleBitmap BitBlt SelectObject

Name

.textbss

Size

Virtual Size

504KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

238KB

Virtual Size

238KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

9.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

51KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.msvcjmc

Size

1024B

Virtual Size

851B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

373B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

1024B

Virtual Size

563B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-20_686a05ba3c5f57e9b50f344fbfb489d0_icedid_njrat

wininet

gdiplus

ole32

kernel32

user32

gdi32

generic