2026-08-22_e026855ce63c85e5c7b6ed95aea2264e_icedid_njrat_vidar

General

Target
2026-08-22_e026855ce63c85e5c7b6ed95aea2264e_icedid_njrat_vidar
Size 142KB
Sample260822-2nb5ksgf69
SHA256 d03ed9c2dbe3eec7fcc47b201f19043e7c478f8662b7456917c96d1a8e5f67be
MD5 e026855ce63c85e5c7b6ed95aea2264e
SHA1 d9a975f0cc7e1c2be6caad01f819514e4b3ca9c3
SHA512 154d4b9ef460f92b75257c5fe1fffba2ee7062a3e91dc631fab3ea414e77216c510b8742df81848054b918a3b46822e7bb5ba2e66b860bfb348bb5257e049d28
SSDEEP 3072:wk4dPkevqVL4pe+MldD+HcKpGNbDmgEnyjKBwC:mdcev7M+M3+8TN2s
TLSH
T198E36D5773A531F9E1778238C9A10656F7B274320B709B9F03A8477A1F632919E3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-22_e026855ce63c85e5c7b6ed95aea2264e_icedid_njrat_vidar

File Explorer

2026-08-22_e026855ce63c85e5c7b6ed95aea2264e_icedid_njrat_vidar

.exe 142KB

2026-08-22_e026855ce63c85e5c7b6ed95aea2264e_icedid_njrat_vidar

IMPHASH 5191f736edaab7911e677f4fd7f06263
SHA256 d03ed9c2dbe3eec7fcc47b201f19043e7c478f8662b7456917c96d1a8e5f67be
MD5 e026855ce63c85e5c7b6ed95aea2264e
SHA1 d9a975f0cc7e1c2be6caad01f819514e4b3ca9c3
SHA512 154d4b9ef460f92b75257c5fe1fffba2ee7062a3e91dc631fab3ea414e77216c510b8742df81848054b918a3b46822e7bb5ba2e66b860bfb348bb5257e049d28
SSDEEP 3072:wk4dPkevqVL4pe+MldD+HcKpGNbDmgEnyjKBwC:mdcev7M+M3+8TN2s
TLSH
T198E36D5773A531F9E1778238C9A10656F7B274320B709B9F03A8477A1F632919E3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

7780

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

LoadLibraryExA CreatePipe GetLastError CloseHandle GetProcAddress ExitProcess GetCurrentProcess GetModuleHandleW lstrcpyW WriteConsoleW CreateFileW HeapReAlloc HeapSize GetCommandLineW ReadFile CreateProcessW GetStartupInfoW SetFilePointerEx GetProcessHeap GetStringTypeW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent RtlUnwindEx SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetModuleHandleExW GetCommandLineA HeapAlloc HeapFree CompareStringW LCMapStringW GetFileType FlushFileBuffers GetConsoleCP GetConsoleMode FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle

user32

CreateWindowStationW SetProcessWindowStation

gdi32

SetBitmapBits CreateBitmap GetBitmapBits

shell32

CommandLineToArgvW

psapi

EnumDeviceDrivers

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-22_e026855ce63c85e5c7b6ed95aea2264e_icedid_njrat_vidar

kernel32

user32

gdi32

shell32

psapi

generic