2026-08-23_c27630b23bb46c59e7e33283cebbcdd3_cobalt-strike_icedid_njrat_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-23_c27630b23bb46c59e7e33283cebbcdd3_cobalt-strike_icedid_njrat_vidar
Size 384KB
Sample260823-19j7msbd64
SHA256 12a7adc861ea86310903c9e6a4fcc3af818c00dac855ff32c2de90f61c37d09f
MD5 c27630b23bb46c59e7e33283cebbcdd3
SHA1 2581cefc212dc81899a1fe4792bef7b4d6bbb427
SHA512 490b5466941f24a7baa6fc0dfc8b0f31b756fce71d199f91a3386aff29fb9c5542d42a455d20659e5c4e36da2a323552642d41775c38ebf94f85b2ff66736f1b
SSDEEP 6144:T0CWOBB9siBJh8FIgGWa/eLIgUmcWs5NAkYMPTfXazQ2HAwPKcjqfNaf/wnmK:VSCeLzUmNk9PTfKXgNcjqfNLm
TLSH
T1C6849E15F79008F5E5A79138C9638206E6717C290760ABEF67F44A392F13AE15E3EF12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-23_c27630b23bb46c59e7e33283cebbcdd3_cobalt-strike_icedid_njrat_vidar

File Explorer

2026-08-23_c27630b23bb46c59e7e33283cebbcdd3_cobalt-strike_icedid_njrat_vidar

.exe 384KB

2026-08-23_c27630b23bb46c59e7e33283cebbcdd3_cobalt-strike_icedid_njrat_vidar

IMPHASH eda133e811a23e756ceb549d37041faa
SHA256 12a7adc861ea86310903c9e6a4fcc3af818c00dac855ff32c2de90f61c37d09f
MD5 c27630b23bb46c59e7e33283cebbcdd3
SHA1 2581cefc212dc81899a1fe4792bef7b4d6bbb427
SHA512 490b5466941f24a7baa6fc0dfc8b0f31b756fce71d199f91a3386aff29fb9c5542d42a455d20659e5c4e36da2a323552642d41775c38ebf94f85b2ff66736f1b
SSDEEP 6144:T0CWOBB9siBJh8FIgGWa/eLIgUmcWs5NAkYMPTfXazQ2HAwPKcjqfNaf/wnmK:VSCeLzUmNk9PTfKXgNcjqfNLm
TLSH
T1C6849E15F79008F5E5A79138C9638206E6717C290760ABEF67F44A392F13AE15E3EF12
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

142648

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ws2_32

ioctlsocket inet_pton freeaddrinfo getaddrinfo select __WSAFDIsSet setsockopt sendto getsockopt recv recvfrom connect socket send getsockname getpeername listen shutdown closesocket bind accept htonl WSASocketA gethostname inet_ntop ntohs ntohl WSAGetLastError htons WSAStartup

advapi32

StartServiceA StartServiceCtrlDispatcherA SetServiceStatus RegisterServiceCtrlHandlerA OpenServiceA OpenSCManagerA DeleteService CreateServiceA RegSetValueExA RegOpenKeyExA RegDeleteValueA

odbc32

ord7 ord9 ord11 ord75 ord39 ord31 ord24

user32

MessageBoxA

kernel32

IsValidCodePage FindNextFileA FindFirstFileExA FindClose HeapReAlloc GetFullPathNameW GetCurrentDirectoryW GetOEMCP GetFileAttributesExW CreateProcessA GetExitCodeProcess WaitForSingleObject DeleteFileW SetStdHandle FlushFileBuffers GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA GetStringTypeW GetProcessHeap HeapSize WriteConsoleW RtlUnwindEx LCMapStringW CompareStringW SearchPathA GetFullPathNameA InitializeCriticalSection EnterCriticalSection LeaveCriticalSection Sleep GetVersionExA CloseHandle DeleteCriticalSection GetCurrentProcessId GetCurrentThreadId FreeConsole GetLastError GetProcAddress LoadLibraryA HeapAlloc RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateFileW GetDriveTypeW GetFileInformationByHandle GetFileType PeekNamedPipe SystemTimeToTzSpecificLocalTime FileTimeToSystemTime CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW QueryPerformanceFrequency GetTimeZoneInformation ReadFile GetStdHandle WriteFile GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte ExitProcess GetCommandLineA GetCommandLineW GetACP SetFilePointerEx GetConsoleCP GetConsoleMode ReadConsoleW SetEndOfFile HeapFree

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-23_c27630b23bb46c59e7e33283cebbcdd3_cobalt-strike_icedid_njrat_vidar

ws2_32

advapi32

odbc32

user32

kernel32

generic