2026-09-08_559eb7e189cffa141d9dad828734421f_akira_coinminer_icedid_njrat_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-08_559eb7e189cffa141d9dad828734421f_akira_coinminer_icedid_njrat_vidar
Size 2.7MB
Sample260910-gce2wafg39
SHA256 47db19cd620ad62c4a6b3a74f8ca3f9c50fea92f6f2381d57b612f3730204821
MD5 559eb7e189cffa141d9dad828734421f
SHA1 668eb2a4785fd5f4106d8f5c520b80941fe92861
SHA512 f16feb28a1f727032de28be4b47f47458e6bcd846f8146f02fc4ede4733740481f11472a3aefc39a542a964e4f101a92f1d44ad132491cf26aa04d70b30971c3
SSDEEP 49152:kaXukDpzywr1LuX4NPCzYMKUIHIRUjE7uqCMJ:7D9BLHPjE7aMJ
TLSH
T1F6D5B527E1324694D1BAA1B56A87330DE673B877C338F9E375610D0D97D62B9CCA9308
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-09-08_559eb7e189cffa141d9dad828734421f_akira_coinminer_icedid_njrat_vidar

.exe 2.7MB

2026-09-08_559eb7e189cffa141d9dad828734421f_akira_coinminer_icedid_njrat_vidar

IMPHASH 1920054cf62732f424adc39c46edc6ac
SHA256 47db19cd620ad62c4a6b3a74f8ca3f9c50fea92f6f2381d57b612f3730204821
MD5 559eb7e189cffa141d9dad828734421f
SHA1 668eb2a4785fd5f4106d8f5c520b80941fe92861
SHA512 f16feb28a1f727032de28be4b47f47458e6bcd846f8146f02fc4ede4733740481f11472a3aefc39a542a964e4f101a92f1d44ad132491cf26aa04d70b30971c3
SSDEEP 49152:kaXukDpzywr1LuX4NPCzYMKUIHIRUjE7uqCMJ:7D9BLHPjE7aMJ
TLSH
T1F6D5B527E1324694D1BAA1B56A87330DE673B877C338F9E375610D0D97D62B9CCA9308
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

bd:4f:ec:1b:01:d5:18:91:ef:c8:99:e3:a5:45:e7:f5:1b:f4:cf:85:48:a1:d3:4c:02:c4:ce:c6:9f:14:f7:88

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=28689155,CN=Pegatron Corporation,O=Pegatron Corporation,L=Taipei City,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Sep 8, 2026

SERIALNUMBER=28689155,CN=Pegatron Corporation,O=Pegatron Corporation,L=Taipei City,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Subject

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04

Issuer

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 26, 2019 - Mar 22, 2034

Subject

SERIALNUMBER=28689155,CN=Pegatron Corporation,O=Pegatron Corporation,L=Taipei City,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

28:ca:fc:61:cc:25:b5:c6:5e:d3:bc:86:8d:2d:4e:8f

Issuer

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 9, 2025 - Jul 28, 2028

Subject

CN=SSL.com Timestamping Unit 2025 E1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

1f:6b:16:62:d2:2e:1b:6c:5d:f1:c0:c1:a0:60:0e:38

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Feb 18, 2025 - Nov 12, 2034

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 13, 2019 - Nov 12, 2034

Minor OS version

Major OS version

Entry point

303116

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Admin\Downloads\0907\CapsuleTool_V20125_T01 - Copy\x64\Release_internal_ZZTOP\Capsule.pdb

kernel32

GetModuleFileNameA GetTempPathA ReadFile WriteFile CreateFileW Sleep GetFileInformationByHandle CloseHandle SizeofResource OutputDebugStringA GetModuleFileNameW GetFileAttributesW UnmapViewOfFile SetFileAttributesW OutputDebugStringW LockResource LoadLibraryW LoadResource FindResourceW GetCurrentDirectoryW GetProcAddress GetModuleHandleW FreeLibrary WideCharToMultiByte CreateFileMappingW MapViewOfFile MultiByteToWideChar GetTickCount CreateDirectoryW GetFileSizeEx DeleteCriticalSection VirtualFree GetCurrentProcess GetStdHandle SetConsoleMode VirtualAlloc GetSystemPowerStatus WaitForSingleObject LocalAlloc ProcessIdToSessionId GetConsoleMode CopyFileA LocalFree WTSGetActiveConsoleSessionId GetCurrentProcessId CreateProcessW CopyFileW SetConsoleOutputCP OpenMutexW GetDriveTypeW EnterCriticalSection LeaveCriticalSection ReleaseSemaphore InitializeCriticalSection SetEvent ResetEvent CreateSemaphoreA CreateEventA WriteConsoleW SetEndOfFile SetStdHandle SetConsoleCtrlHandler DecodePointer RaiseException GetLastError SetConsoleTextAttribute InitializeCriticalSectionEx GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose CreatePipe PeekConsoleInputA ReadConsoleInputW GetNumberOfConsoleInputEvents HeapReAlloc HeapSize DeleteFileW RtlUnwind GetFileAttributesExW GetExitCodeProcess GetTimeZoneInformation GetConsoleOutputCP RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead FormatMessageW GetStringTypeW SetLastError InitializeCriticalSectionAndSpinCount CreateEventW SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree EncodePointer CompareStringW LCMapStringW GetLocaleInfoW GetCPInfo RtlUnwindEx RtlPcToFileHeader InterlockedPushEntrySList InterlockedFlushSList LoadLibraryExW GetConsoleCP DuplicateHandle CreateThread ExitThread ResumeThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetDateFormatW GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetCurrentThread SetFilePointerEx ReadConsoleW FlushFileBuffers

user32

UnregisterClassW wsprintfW

advapi32

InitiateSystemShutdownW AdjustTokenPrivileges OpenProcessToken LookupPrivilegeValueW

shell32

SHGetFolderPathW

ole32

CoCreateInstance CoSetProxyBlanket CoInitialize CoInitializeSecurity CoInitializeEx CoUninitialize

oleaut32

VariantClear VariantChangeType SetErrorInfo CreateErrorInfo VariantInit SafeArrayUnaccessData SafeArrayAccessData SysFreeString SysAllocString GetErrorInfo

shlwapi

PathIsDirectoryW PathFileExistsA PathAppendW

version

VerQueryValueW

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

300KB

Virtual Size

299KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

69KB

Virtual Size

69KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gehcont

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-08_559eb7e189cffa141d9dad828734421f_akira_coinminer_icedid_njrat_vidar

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

version

generic