2026-09-01_14044302a9e79cd2e7ae8322ca2f35fe_icedid_njrat_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-01_14044302a9e79cd2e7ae8322ca2f35fe_icedid_njrat_vidar
Size 1.0MB
Sample260903-te2d4s1aqa
SHA256 dc5bb4dcdc8ecab7a4fd361f92bd4d452e95d332cf53b4d73c067e1390f76b25
MD5 14044302a9e79cd2e7ae8322ca2f35fe
SHA1 21f908b57e886b3c6cc2360d7f72e37db2a20cce
SHA512 947a93194ee434ae5847bbe6e763921d43b93ce740394063d1f533d4694848490b0a32876c18aa36bc08626ea5cb688d68b0c516cc66d318cd09e882fc609902
SSDEEP 24576:IObUzZjYf5z5X295A2xCROFHmo95O4tpgtnQDSEzfwJS5u27:nBzto62QAF1tg50zIJS/7
TLSH
T1FE35BE5A77A944F8E167D139C9928A56F7B274061BB08BDF13A0836B1F232D14F3E721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-01_14044302a9e79cd2e7ae8322ca2f35fe_icedid_njrat_vidar

File Explorer

2026-09-01_14044302a9e79cd2e7ae8322ca2f35fe_icedid_njrat_vidar

.exe 1.0MB

2026-09-01_14044302a9e79cd2e7ae8322ca2f35fe_icedid_njrat_vidar

IMPHASH c814101d5b730017de959afcd5bba7fd
SHA256 dc5bb4dcdc8ecab7a4fd361f92bd4d452e95d332cf53b4d73c067e1390f76b25
MD5 14044302a9e79cd2e7ae8322ca2f35fe
SHA1 21f908b57e886b3c6cc2360d7f72e37db2a20cce
SHA512 947a93194ee434ae5847bbe6e763921d43b93ce740394063d1f533d4694848490b0a32876c18aa36bc08626ea5cb688d68b0c516cc66d318cd09e882fc609902
SSDEEP 24576:IObUzZjYf5z5X295A2xCROFHmo95O4tpgtnQDSEzfwJS5u27:nBzto62QAF1tg50zIJS/7
TLSH
T1FE35BE5A77A944F8E167D139C9928A56F7B274061BB08BDF13A0836B1F232D14F3E721
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

166472

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

Sleep CloseHandle LoadLibraryW GetProcAddress GetCurrentProcessId ReadFile WritePrivateProfileStringW WriteFile CreateFileW GetModuleHandleA GetPrivateProfileStringW GetLastError LoadLibraryA WaitNamedPipeW SizeofResource LockResource LoadResource FindResourceW GetModuleHandleW GetModuleFileNameW GetFileAttributesW MultiByteToWideChar FreeLibrary LoadLibraryExW GetCurrentProcess IsWow64Process SetLastError WaitForSingleObject ResumeThread CreateDirectoryW GetTempPathW WriteConsoleW HeapSize GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetTimeZoneInformation HeapReAlloc SetStdHandle GetFullPathNameW GetCurrentDirectoryW EnumSystemLocalesW GetUserDefaultLCID WideCharToMultiByte GetStringTypeW EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection GetCurrentThreadId DuplicateHandle WaitForSingleObjectEx SwitchToThread GetCurrentThread GetExitCodeThread InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetTickCount EncodePointer DecodePointer QueryPerformanceCounter GetCPInfo CompareStringW LCMapStringW GetLocaleInfoW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW InitializeSListHead LocalFree CreateTimerQueue SetEvent SignalObjectAndWait CreateThread SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait GetThreadTimes FreeLibraryAndExitThread GetVersionExW VirtualAlloc VirtualProtect VirtualFree ReleaseSemaphore InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList UnregisterWaitEx RtlUnwindEx RtlPcToFileHeader RaiseException ExitProcess GetModuleHandleExW GetDriveTypeW GetFileInformationByHandle GetFileType PeekNamedPipe SystemTimeToTzSpecificLocalTime FileTimeToSystemTime ExitThread GetStdHandle SetFilePointerEx HeapAlloc HeapFree FlushFileBuffers GetConsoleCP GetConsoleMode IsValidLocale

user32

MessageBoxA MessageBoxW

shell32

SHGetFolderPathW

oleaut32

SafeArrayAccessData SafeArrayCreateVector SafeArrayCreate SafeArrayUnaccessData SafeArrayDestroy

mscoree

CLRCreateInstance CorBindToRuntime

wininet

InternetOpenA InternetReadFile InternetOpenUrlA

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

winmm

PlaySoundW

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-01_14044302a9e79cd2e7ae8322ca2f35fe_icedid_njrat_vidar

kernel32

user32

shell32

oleaut32

mscoree

wininet

version

winmm

generic