2026-09-29_693974224c9814fb7e5d36f2a2f21519_cobalt-strike_icedid_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-29_693974224c9814fb7e5d36f2a2f21519_cobalt-strike_icedid_njrat
Size 7.7MB
Sample260930-yleadazte1
SHA256 60cf3951fb09d34b02bc14316e460e7b7011667ababfb16882aab4db5efd6fbd
MD5 693974224c9814fb7e5d36f2a2f21519
SHA1 07f4db276026bc082550aba47df20ee4531f35cf
SHA512 561d93ade553e5d459c4a34304bc5354315bcd21ba8910b807a1539d6ce55c5bfdf947c2e285ffa291267996940bf603943a235b67ebf1282bcd98edc3bd7226
SSDEEP 98304:z1D5e/SF2QFL/Zbk+zsJg2kaqGNzMmbr0ZI:zl5e/SrF1k0s+2kaqGNzbbrD
TLSH
T132869E9AB2E951C4D177D07D8AD7971BEAB13C14833086CF069096AE2E33BE56C37721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-29_693974224c9814fb7e5d36f2a2f21519_cobalt-strike_icedid_njrat

File Explorer

2026-09-29_693974224c9814fb7e5d36f2a2f21519_cobalt-strike_icedid_njrat

.exe 7.7MB

2026-09-29_693974224c9814fb7e5d36f2a2f21519_cobalt-strike_icedid_njrat

IMPHASH 3a0c2a3a15e2164a5b4d9bd72efe67c5
SHA256 60cf3951fb09d34b02bc14316e460e7b7011667ababfb16882aab4db5efd6fbd
MD5 693974224c9814fb7e5d36f2a2f21519
SHA1 07f4db276026bc082550aba47df20ee4531f35cf
SHA512 561d93ade553e5d459c4a34304bc5354315bcd21ba8910b807a1539d6ce55c5bfdf947c2e285ffa291267996940bf603943a235b67ebf1282bcd98edc3bd7226
SSDEEP 98304:z1D5e/SF2QFL/Zbk+zsJg2kaqGNzMmbr0ZI:zl5e/SrF1k0s+2kaqGNzbbrD
TLSH
T132869E9AB2E951C4D177D07D8AD7971BEAB13C14833086CF069096AE2E33BE56C37721
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3029719

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Admin\Documents\pvz-fun-adventure\build\ReleaseGOTY_x64\bin\PlantsVsZombies.pdb

kernel32

GetSystemDirectoryA MulDiv FileTimeToSystemTime DeleteFileA OutputDebugStringA GetLastError SetErrorMode GetCurrentProcess GetCurrentThread SetThreadPriority GetThreadPriority GetVersionExA VirtualProtect VirtualQuery IsBadWritePtr GetWindowsDirectoryA GetCommandLineA CreateMutexA SetUnhandledExceptionFilter UnmapViewOfFile GetCurrentThreadId GetFileTime ReleaseSRWLockExclusive AcquireSRWLockExclusive WriteConsoleW SetEndOfFile HeapSize RemoveDirectoryW OutputDebugStringW SetConsoleCtrlHandler GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW CreateDirectoryW HeapReAlloc SetStdHandle GetTimeZoneInformation GetFileSizeEx SetFilePointerEx ReadConsoleW CreateEventA GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW LoadLibraryExW IsThreadAFiber GetTempPathW HeapAlloc HeapFree UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext IsProcessorFeaturePresent GetCurrentDirectoryW SetCurrentDirectoryW SetEnvironmentVariableW WriteFile GetStdHandle GetModuleFileNameW GetFullPathNameW GetLocalTime SystemTimeToTzSpecificLocalTime PeekNamedPipe GetFileType GetFileInformationByHandle GetDriveTypeW CreateFileW FreeLibraryAndExitThread ResumeThread ExitThread CreateThread GetModuleHandleExW TerminateProcess ExitProcess ReadFile RtlUnwind FlsFree FlsSetValue FlsGetValue FlsAlloc SetLastError InterlockedFlushSList InterlockedPushEntrySList WaitForSingleObject DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CloseHandle GetFileSize FindNextFileA FindFirstFileA FindClose CreateFileA FindResourceA SizeofResource LockResource LoadResource GetModuleHandleA Sleep GetFileAttributesExA LoadLibraryA GetProcAddress FreeLibrary GetModuleFileNameA QueryPerformanceFrequency QueryPerformanceCounter CreateFileMappingA MapViewOfFile GetCurrentProcessId GetTickCount WideCharToMultiByte MultiByteToWideChar GlobalFree GlobalLock GlobalUnlock GetConsoleMode RaiseException RtlPcToFileHeader RtlUnwindEx RtlLookupFunctionEntry GetCPInfo CompareStringEx WakeAllConditionVariable SleepConditionVariableSRW GetStringTypeW LCMapStringEx DecodePointer EncodePointer GetLocaleInfoEx LocalFree InitializeCriticalSectionEx WakeConditionVariable GetSystemTimePreciseAsFileTime FormatMessageA TryAcquireSRWLockExclusive GetLogicalProcessorInformationEx GetExitCodeThread SwitchToThread WaitForSingleObjectEx InitializeSListHead GetSystemTimeAsFileTime GetModuleHandleW GetStartupInfoW GlobalAlloc

user32

GetClipboardData EmptyClipboard GetMessagePos SendMessageA LoadCursorA PostMessageA CreateWindowExW PostThreadMessageA IsWindow RegisterClipboardFormatA GetActiveWindow CloseClipboard MessageBoxA GetSystemMetrics DrawTextExA GetDC ReleaseDC GetClientRect ClientToScreen FillRect OffsetRect GetMessageA DestroyWindow ShowWindow SetClipboardData SetTimer SetWindowTextA GetWindowTextA AdjustWindowRect MessageBoxW SetCursor GetSysColorBrush LoadIconA RegisterWindowMessageA PeekMessageA IsChild MoveWindow GetWindowPlacement IsWindowVisible IsIconic DialogBoxIndirectParamA EndDialog GetDlgItem SetCapture ReleaseCapture SetForegroundWindow BeginPaint EndPaint GetWindowRect TranslateMessage DispatchMessageA DefWindowProcA RegisterClassA OpenClipboard SetFocus EnumDisplaySettingsA GetCursorPos SetCaretPos ShowCaret HideCaret DestroyCaret CreateCaret GetCursor SystemParametersInfoA ScreenToClient ChangeDisplaySettingsA DestroyCursor GetClassNameA EnumWindows EnumChildWindows SetParent SetWindowLongPtrA GetWindowLongPtrA SetWindowLongA WindowFromPoint MapWindowPoints CreateWindowExA

gdi32

CreateCompatibleDC SelectClipRgn CreateRectRgn GetTextExtentPoint32A CreateSolidBrush GdiFlush TextOutA GetObjectA CreateDIBSection GetTextMetricsA SetTextColor StretchBlt SetBkMode SelectObject Rectangle IntersectClipRect GetStockObject GetDeviceCaps DeleteObject DeleteDC CreateFontA CreateFontIndirectA BitBlt

advapi32

RegDeleteKeyA RegOpenKeyExA RegOpenKeyA RegEnumKeyA RegDeleteValueA RegCloseKey RegSetValueExA RegQueryValueExA RegCreateKeyExA

shell32

ShellExecuteA ShellExecuteW

ole32

CoCreateInstance CoInitialize

oleaut32

VariantInit VariantClear VariantChangeType SetErrorInfo GetErrorInfo SysAllocString SysFreeString CreateErrorInfo

winmm

PlaySoundA timeGetTime timeBeginPeriod timeEndPeriod mixerGetDevCapsA mixerOpen mixerClose mixerGetLineInfoA mixerGetLineControlsA mixerGetControlDetailsA mixerSetControlDetails

ws2_32

__WSAFDIsSet closesocket connect ioctlsocket htons inet_addr recv select send socket gethostbyname WSAStartup WSACleanup WSAGetLastError

avcodec-62

av_packet_alloc av_packet_unref avcodec_alloc_context3 avcodec_open2 avcodec_parameters_to_context avcodec_receive_frame avcodec_send_packet

avformat-62

av_find_best_stream av_read_frame avformat_open_input

avutil-60

av_frame_alloc

shlwapi

PathRemoveFileSpecA

sdl3

SDL_GetWindowProperties SDL_RenderFillRect SDL_RenderRect SDL_RenderLine SDL_SetRenderDrawBlendMode SDL_CreateSurfaceFrom SDL_SetTextureAlphaMod SDL_SetTextureColorMod SDL_CreateTextureFromSurface SDL_GetKeyName SDL_Delay SDL_GetTicksNS SDL_SetRenderVSync SDL_DestroyRenderer SDL_RenderPresent SDL_GetRendererName SDL_SavePNG SDL_free SDL_GetPointerProperty SDL_SetClipboardText SDL_GetClipboardText SDL_GetCurrentVideoDriver SDL_GetWindowID SDL_RenderGeometry SDL_GetWindowFlags SDL_GetWindowPosition SDL_GetWindowSize SDL_GetWindowSizeInPixels SDL_GetGamepads SDL_OpenGamepad SDL_GetGamepadAxis SDL_GetGamepadButton SDL_CloseGamepad SDL_GetKeyboardFocus SDL_StartTextInput SDL_TextInputActive SDL_StopTextInput SDL_SetTextInputArea SDL_GetMouseFocus SDL_GetGlobalMouseState SDL_WarpMouseInWindow SDL_GetWindowRelativeMouseMode SDL_CaptureMouse SDL_CreateSystemCursor SDL_SetCursor SDL_DestroyCursor SDL_ShowCursor SDL_HideCursor SDL_SetHint SDL_OpenURL SDL_GetPerformanceCounter SDL_GetPerformanceFrequency SDL_GetVersion SDL_CreateTexture SDL_SetTextureBlendMode SDL_SetTextureScaleMode SDL_UpdateTexture SDL_SetRenderViewport SDL_GetRenderViewport SDL_RenderViewportSet SDL_SetRenderClipRect SDL_GetRenderClipRect SDL_RenderClipEnabled SDL_GetRenderScale SDL_RenderGeometryRaw SDL_DestroyTexture SDL_GetPrimaryDisplay SDL_GetCurrentDisplayMode SDL_SetRenderTextureAddressMode SDL_DestroySurface SDL_SetRenderTarget SDL_GetRenderTarget SDL_SetRenderDrawColor SDL_RenderClear SDL_RenderReadPixels SDL_IOFromConstMem SDL_PutAudioStreamPlanarData SDL_ResumeAudioStreamDevice SDL_OpenAudioDeviceStream SDL_CreateSurface SDL_UnlockSurface SDL_LoadBMP_IO SDL_GetDisplayContentScale SDL_CreateWindow SDL_RaiseWindow SDL_SetWindowFullscreen SDL_DestroyWindow SDL_CreateColorCursor SDL_GetDefaultCursor SDL_PollEvent SDL_GetBasePath SDL_Init SDL_Quit SDL_CreateRenderer SDL_UpdateYUVTexture SDL_SetRenderLogicalPresentation SDL_ConvertEventToRenderCoordinates SDL_RenderTexture SDL_RenderTextureRotated

sdl3_ttf

TTF_OpenFont TTF_SetFontStyle TTF_SetFontHinting TTF_GetFontHeight TTF_GetFontAscent TTF_Init TTF_GetFontLineSkip TTF_SetFontKerning TTF_GetGlyphImageForIndex TTF_GetGlyphKerning TTF_RenderGlyph_Blended TTF_CloseFont TTF_GetFontDescent

portaudio_x64

ord4 ord5 ord18 ord19 ord21 ord22

tinyfiledialogs64

tinyfd_openFileDialog

imm32

ImmGetContext ImmSetCandidateWindow ImmSetCompositionWindow ImmReleaseContext

Name

.textbss

Size

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

6.0MB

Virtual Size

6.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

111KB

Virtual Size

890KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

256KB

Virtual Size

255KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

1024B

Virtual Size

777B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

373B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

1024B

Virtual Size

563B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

261KB

Virtual Size

260KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-29_693974224c9814fb7e5d36f2a2f21519_cobalt-strike_icedid_njrat

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

winmm

ws2_32

avcodec-62

avformat-62

avutil-60

shlwapi

sdl3

sdl3_ttf

portaudio_x64

tinyfiledialogs64

imm32

generic