2026-09-10_dd9dc51d76644b1ed2bd30125905bd50_icedid_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-10_dd9dc51d76644b1ed2bd30125905bd50_icedid_njrat
Size 10.9MB
Sample260910-ls4gmaap5s
SHA256 ac74b20aabe2af0775968df573e8b76a7848f9a6bd009814be459b524b35e309
MD5 dd9dc51d76644b1ed2bd30125905bd50
SHA1 33330f90a310f17cee8453cdc70491f965dc67e9
SHA512 217bb5457bb09532c4a63c768dca750f1bec381e45271e8fb9e59ab376e58b9c38c06e2324ab76ac0687a9770155f199b99f8f9b19777460d5690df987a523c1
SSDEEP 98304:S80x5TZ2CG8m26IfuQwo/Y7mgTm05AwJHE6hZe0lFb9POZq+9P:SP5zGJcZg7PAmkYekFb1OZq
TLSH
T1DBC6191976BA40A1D17AC039E903876BDD60304A473C61FF6385DAC97F707E8AA7CB52
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-10_dd9dc51d76644b1ed2bd30125905bd50_icedid_njrat

File Explorer

2026-09-10_dd9dc51d76644b1ed2bd30125905bd50_icedid_njrat

.exe 10.9MB

2026-09-10_dd9dc51d76644b1ed2bd30125905bd50_icedid_njrat

IMPHASH d158380400faaf94a728d78dbc68184c
SHA256 ac74b20aabe2af0775968df573e8b76a7848f9a6bd009814be459b524b35e309
MD5 dd9dc51d76644b1ed2bd30125905bd50
SHA1 33330f90a310f17cee8453cdc70491f965dc67e9
SHA512 217bb5457bb09532c4a63c768dca750f1bec381e45271e8fb9e59ab376e58b9c38c06e2324ab76ac0687a9770155f199b99f8f9b19777460d5690df987a523c1
SSDEEP 98304:S80x5TZ2CG8m26IfuQwo/Y7mgTm05AwJHE6hZe0lFb9POZq+9P:SP5zGJcZg7PAmkYekFb1OZq
TLSH
T1DBC6191976BA40A1D17AC039E903876BDD60304A473C61FF6385DAC97F707E8AA7CB52
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5364032

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\ASUS\Desktop\semun\build\Semun.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

ntdll

RtlUnwind RtlCaptureContext RtlPcToFileHeader VerSetConditionMask RtlUnwindEx RtlLookupFunctionEntry RtlCaptureStackBackTrace RtlVirtualUnwind

winhttp

WinHttpCloseHandle WinHttpQueryHeaders WinHttpReceiveResponse WinHttpSendRequest WinHttpOpenRequest WinHttpOpen WinHttpConnect WinHttpSetTimeouts WinHttpQueryDataAvailable WinHttpReadData

kernel32

SetFilePointerEx ReadConsoleW GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID QueryPerformanceCounter QueryPerformanceFrequency FreeLibrary GetModuleHandleA GetProcAddress LoadLibraryA MultiByteToWideChar GetLocaleInfoA GlobalAlloc GlobalUnlock GlobalLock GlobalFree WideCharToMultiByte GetCurrentThread SetThreadPriority SetLastError FlushInstructionCache GetSystemInfo VirtualAllocEx VirtualProtectEx VirtualQueryEx VirtualFreeEx GetModuleHandleW GetStdHandle GetConsoleMode SetConsoleMode GetConsoleWindow CloseHandle GetProcessId OpenProcess lstrcmpiW CreateToolhelp32Snapshot Process32FirstW Process32NextW Module32First Module32Next GetModuleFileNameW QueryFullProcessImageNameW MoveFileExW GetExitCodeProcess ReadProcessMemory WriteFile SetUnhandledExceptionFilter GetLocalTime lstrlenA SetConsoleCtrlHandler SetConsoleTitleA CreateFileA GetFileSizeEx ReadFile HeapAlloc HeapReAlloc HeapFree GetProcessHeap MapViewOfFile UnmapViewOfFile CreateFileMappingA HeapQueryInformation GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect IsThreadAFiber OutputDebugStringW UnhandledExceptionFilter GetCommandLineW GetCommandLineA ExitProcess IsProcessorFeaturePresent FreeLibraryAndExitThread ResumeThread ExitThread CreateThread WriteConsoleW GetFileType HeapValidate HeapSize TerminateProcess GetCurrentProcess FlsFree FlsSetValue FlsGetValue FlsAlloc LoadLibraryExW InterlockedFlushSList InterlockedPushEntrySList VirtualQuery InitializeSListHead GetSystemTimeAsFileTime GetCurrentProcessId GetStartupInfoW IsDebuggerPresent GetStringTypeW LCMapStringEx GetCPInfo CompareStringEx DecodePointer EncodePointer DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection CreateSymbolicLinkW GetFileInformationByHandleEx CreateHardLinkW CopyFile2 CreateDirectoryExW DeviceIoControl AreFileApisANSI IsValidCodePage GetACP GetOEMCP GetTimeZoneInformation CreateFile2 GetTempPathW SetFileTime SetFileInformationByHandle GetEnvironmentStringsW SetEndOfFile SetFileAttributesW GetFullPathNameW GetFinalPathNameByHandleW GetFileInformationByHandle GetFileAttributesExW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle CreateFileW IsValidLocale GetFileAttributesW GetDiskFreeSpaceExW FindNextFileW FindFirstFileExW FindFirstFileW FindClose CreateDirectoryW GetCurrentDirectoryW SetCurrentDirectoryW GetSystemTimePreciseAsFileTime ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared TryAcquireSRWLockExclusive TryAcquireSRWLockShared SleepConditionVariableSRW Sleep GetCurrentThreadId GetTickCount64 RaiseException WakeConditionVariable WakeAllConditionVariable InitOnceBeginInitialize InitOnceComplete FormatMessageA GetLastError FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetModuleHandleExW WaitForSingleObjectEx SwitchToThread GetExitCodeThread GetLogicalProcessorInformationEx LocalFree GetLocaleInfoEx

user32

GetKeyState GetCapture SetCapture ReleaseCapture TrackMouseEvent GetForegroundWindow GetDC ReleaseDC GetClientRect GetMessageExtraInfo GetKeyboardLayout GetAsyncKeyState IsWindowUnicode SetCursorPos MonitorFromPoint SetWindowLongA MessageBoxA GetWindowRect UpdateWindow GetSystemMetrics SetWindowDisplayAffinity SetWindowPos SetLayeredWindowAttributes DestroyWindow CreateWindowExA RegisterClassExA UnregisterClassA PostQuitMessage DefWindowProcA PeekMessageA DispatchMessageA TranslateMessage FindWindowW wsprintfA GetWindowThreadProcessId EnumWindows IsWindow IsWindowVisible ShowWindow SetCursor EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard SetProcessDPIAware MonitorFromWindow LoadCursorA ScreenToClient ClientToScreen GetCursorPos SendInput

gdi32

DeleteObject GetDeviceCaps CreateRectRgn

shell32

SHGetFolderPathA ShellExecuteA ShellExecuteW

d3dcompiler_47

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea DwmIsCompositionEnabled DwmGetColorizationColor DwmEnableBlurBehindWindow

imm32

ImmSetCandidateWindow ImmGetContext ImmReleaseContext ImmSetCompositionWindow

winmm

PlaySoundA

Name

.text

Size

6.3MB

Virtual Size

6.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.5MB

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.7MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

388KB

Virtual Size

388KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.msvcjmc

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

488B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

27KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-10_dd9dc51d76644b1ed2bd30125905bd50_icedid_njrat

d3d11

d3dx11_43

ntdll

winhttp

kernel32

user32

gdi32

shell32

d3dcompiler_47

dwmapi

imm32

winmm

generic