2026-09-24_bdad7e1fa698160c9142fa5ffab7dc65_icedid_njrat_vidar

General

Target
2026-09-24_bdad7e1fa698160c9142fa5ffab7dc65_icedid_njrat_vidar
Size 1.6MB
Sample260924-dkr5maybpd
SHA256 016dd9b7393f274492f37ca30fada7a9b62147803645b6562f8047a73da82994
MD5 bdad7e1fa698160c9142fa5ffab7dc65
SHA1 495e32593016fa8961d9494efa65e0f53b2e8402
SHA512 c4c9d448df2b3dba0bdf03120a432b207aa8215e84eda2c176c9af8061b813df41b48c6d22116437cf30a63d016b873b64eeb78bbd9a02bb70be68778e59bab4
SSDEEP 24576:N58E1mb57GBiOl6a8JTth/RWZvR6wQQ92pN3b:kxb5+Pl6bJTIZ5jdgpZ
TLSH
T10B75018572A550EAF077C238CDB08663E572BC564B615B6F13A4277EEF332806E3A711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-24_bdad7e1fa698160c9142fa5ffab7dc65_icedid_njrat_vidar

File Explorer

2026-09-24_bdad7e1fa698160c9142fa5ffab7dc65_icedid_njrat_vidar

.exe 1.6MB

2026-09-24_bdad7e1fa698160c9142fa5ffab7dc65_icedid_njrat_vidar

IMPHASH 4a02f263fa1b33aa87334d0564252a2c
SHA256 016dd9b7393f274492f37ca30fada7a9b62147803645b6562f8047a73da82994
MD5 bdad7e1fa698160c9142fa5ffab7dc65
SHA1 495e32593016fa8961d9494efa65e0f53b2e8402
SHA512 c4c9d448df2b3dba0bdf03120a432b207aa8215e84eda2c176c9af8061b813df41b48c6d22116437cf30a63d016b873b64eeb78bbd9a02bb70be68778e59bab4
SSDEEP 24576:N58E1mb57GBiOl6a8JTth/RWZvR6wQQ92pN3b:kxb5+Pl6bJTIZ5jdgpZ
TLSH
T10B75018572A550EAF077C238CDB08663E572BC564B615B6F13A4277EEF332806E3A711
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

28612

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

QueryPerformanceCounter QueryPerformanceFrequency GetTickCount RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW HeapSize RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RaiseException GetStdHandle GetFileType GetModuleFileNameW GetModuleHandleExW WriteConsoleW ExitProcess CreateFileW GetFileInformationByHandle CloseHandle PeekNamedPipe SystemTimeToTzSpecificLocalTime FileTimeToSystemTime WriteFile GetCommandLineA GetCommandLineW ReadFile GetConsoleMode ReadConsoleW GetConsoleCP HeapFree HeapAlloc OutputDebugStringW CompareStringW LCMapStringW SetStdHandle HeapReAlloc GetCurrentDirectoryW MultiByteToWideChar FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetStringTypeW GetProcessHeap SetEndOfFile SetFilePointerEx FlushFileBuffers GetFileSizeEx GetTimeZoneInformation

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-24_bdad7e1fa698160c9142fa5ffab7dc65_icedid_njrat_vidar

kernel32

generic