2026-09-08_78fdb0fe86666b4d8d542c0d465a24a1_icedid_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-08_78fdb0fe86666b4d8d542c0d465a24a1_icedid_njrat
Size 1.9MB
Sample260910-fdgresyarg
SHA256 0d9ba8fdadade461764ed7d2bcf72e964bdfe98a8ac06139e08abcab121ac846
MD5 78fdb0fe86666b4d8d542c0d465a24a1
SHA1 52ffb49ef5e805011d5f9ff8f86c120e81a6609d
SHA512 297931eaacef4780ba7115b37f790e21f20e594713113e2e023d948432d3c2765aa37a576a7beef20d08ecb4fc28c7eb967fcf67cf85a58adce2872aa7760ce0
SSDEEP 24576:171U9t06QeLLeWdONm9ljT1qYuaOH6j6m6:1C9t06QCeVmBHuzM6m
TLSH
T19F95A406F66EA181E57A80F9608134EEBCB2387C477082D7A2875A393650FD45BF9F53
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-08_78fdb0fe86666b4d8d542c0d465a24a1_icedid_njrat

File Explorer

2026-09-08_78fdb0fe86666b4d8d542c0d465a24a1_icedid_njrat

.exe 1.9MB

2026-09-08_78fdb0fe86666b4d8d542c0d465a24a1_icedid_njrat

IMPHASH 0a782e4781b2a67bbca2432a97b09d39
SHA256 0d9ba8fdadade461764ed7d2bcf72e964bdfe98a8ac06139e08abcab121ac846
MD5 78fdb0fe86666b4d8d542c0d465a24a1
SHA1 52ffb49ef5e805011d5f9ff8f86c120e81a6609d
SHA512 297931eaacef4780ba7115b37f790e21f20e594713113e2e023d948432d3c2765aa37a576a7beef20d08ecb4fc28c7eb967fcf67cf85a58adce2872aa7760ce0
SSDEEP 24576:171U9t06QeLLeWdONm9ljT1qYuaOH6j6m6:1C9t06QCeVmBHuzM6m
TLSH
T19F95A406F66EA181E57A80F9608134EEBCB2387C477082D7A2875A393650FD45BF9F53
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12661

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetCurrentProcess GetModuleHandleA GetProcAddress LoadResource LockResource SizeofResource FindResourceA CreateFileW CloseHandle ReadConsoleW ReadFile GetConsoleMode GetConsoleOutputCP FlushFileBuffers SetFilePointerEx EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException MultiByteToWideChar WideCharToMultiByte GetLastError HeapAlloc HeapFree GetProcessHeap VirtualQuery FreeLibrary RtlPcToFileHeader RtlUnwindEx InterlockedPushEntrySList InterlockedFlushSList GetModuleFileNameW LoadLibraryExW SetLastError EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleExW GetStdHandle WriteFile ExitProcess GetCommandLineA GetCommandLineW HeapSize HeapValidate GetSystemInfo GetCurrentThread GetFileType OutputDebugStringW WriteConsoleW SetConsoleCtrlHandler GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW HeapReAlloc HeapQueryInformation GetFileSizeEx RtlUnwind

user32

MessageBoxA

wininet

InternetOpenA InternetCloseHandle InternetOpenUrlA InternetReadFile

Name

.text

Size

875KB

Virtual Size

874KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

208KB

Virtual Size

208KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.msvcjmc

Size

512B

Virtual Size

325B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

337B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

1024B

Virtual Size

546B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

684KB

Virtual Size

683KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rdata2

Size

105KB

Virtual Size

105KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-08_78fdb0fe86666b4d8d542c0d465a24a1_icedid_njrat

kernel32

user32

wininet

generic