2026-10-02_14b49934c72b61d15014911d1cde9c74_cobalt-strike_icedid_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-02_14b49934c72b61d15014911d1cde9c74_cobalt-strike_icedid_njrat
Size 147KB
Sample261003-vg366ashlc
SHA256 6444eca7ab7430ce4c9a76a8948a2737fdd3d37649b50dd6bc11eaf10d5de661
MD5 14b49934c72b61d15014911d1cde9c74
SHA1 0398ada3f66bb0c40891a88437440d8747fd5070
SHA512 97c4ff90b18cbace06961d2a276e20542305636d5fde9de83e560863912cf0b3e039c834bdc4ea2880a38bcfebb62d8f8a9289d15d45c777ad5e241ba2d3d8b6
SSDEEP 3072:8qk0pWxh3CkyB9ihpSWxi6wc3s+rt4efdJH:ivhhpSQeRstzbH
TLSH
T1C1E3D042F3A588E5E1779638186506517E3FAC100BA18F2F62A8037DDFA5359CF36F62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-02_14b49934c72b61d15014911d1cde9c74_cobalt-strike_icedid_njrat

File Explorer

2026-10-02_14b49934c72b61d15014911d1cde9c74_cobalt-strike_icedid_njrat

.exe 147KB

2026-10-02_14b49934c72b61d15014911d1cde9c74_cobalt-strike_icedid_njrat

SHA256 6444eca7ab7430ce4c9a76a8948a2737fdd3d37649b50dd6bc11eaf10d5de661
MD5 14b49934c72b61d15014911d1cde9c74
SHA1 0398ada3f66bb0c40891a88437440d8747fd5070
SHA512 97c4ff90b18cbace06961d2a276e20542305636d5fde9de83e560863912cf0b3e039c834bdc4ea2880a38bcfebb62d8f8a9289d15d45c777ad5e241ba2d3d8b6
SSDEEP 3072:8qk0pWxh3CkyB9ihpSWxi6wc3s+rt4efdJH:ivhhpSQeRstzbH
TLSH
T1C1E3D042F3A588E5E1779638186506517E3FAC100BA18F2F62A8037DDFA5359CF36F62
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2318336

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.prkdrxh

Size

Virtual Size

135KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rinxfog

Size

48KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ayiujbj

Size

3KB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.akurhal

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tiqopcd

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.zxxvtew

Size

512B

Virtual Size

488B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bbzmhpb

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.kgmgziv

Size

86KB

Virtual Size

85KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-02_14b49934c72b61d15014911d1cde9c74_cobalt-strike_icedid_njrat

generic