2026-10-06_3554950d681990df3c8cf2502cbdb1f7_cobalt-strike_icedid_njrat_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-06_3554950d681990df3c8cf2502cbdb1f7_cobalt-strike_icedid_njrat_vidar
Size 456KB
Sample261006-rmybbafc28
SHA256 4236a5066d71d5a899a76940c9110640949733bbbe7a4684e5971803f7c7de39
MD5 3554950d681990df3c8cf2502cbdb1f7
SHA1 c7ef2a036cfd21fea6c196edb92ed7952c3f4049
SHA512 d504eb59247d635ad9ca07da3db7c90b768ff37c2810ecda19da8018d1fe48bc818b9c7a32d717c5cbb0faea54e758a20265f3db21bc41bcbfa421261b66d681
SSDEEP 6144:ofcy6czjzg5wvoTQ/ZKyLnbjS+r1EDSqjaL9ZwohnSsDyhWCEjZ+3Jy:ofcyxYuvj/4Ibj2DSzcoZ5iWn1+s
TLSH
T165A46C15B7A544F5E077C13889A28645EAB27C550B71D76F03A8D27A2F333A09E3EF21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-06_3554950d681990df3c8cf2502cbdb1f7_cobalt-strike_icedid_njrat_vidar

File Explorer

2026-10-06_3554950d681990df3c8cf2502cbdb1f7_cobalt-strike_icedid_njrat_vidar

.exe 456KB

2026-10-06_3554950d681990df3c8cf2502cbdb1f7_cobalt-strike_icedid_njrat_vidar

IMPHASH ebc2a332eede6ed20e160a9e02e2539e
SHA256 4236a5066d71d5a899a76940c9110640949733bbbe7a4684e5971803f7c7de39
MD5 3554950d681990df3c8cf2502cbdb1f7
SHA1 c7ef2a036cfd21fea6c196edb92ed7952c3f4049
SHA512 d504eb59247d635ad9ca07da3db7c90b768ff37c2810ecda19da8018d1fe48bc818b9c7a32d717c5cbb0faea54e758a20265f3db21bc41bcbfa421261b66d681
SSDEEP 6144:ofcy6czjzg5wvoTQ/ZKyLnbjS+r1EDSqjaL9ZwohnSsDyhWCEjZ+3Jy:ofcyxYuvj/4Ibj2DSzcoZ5iWn1+s
TLSH
T165A46C15B7A544F5E077C13889A28645EAB27C550B71D76F03A8D27A2F333A09E3EF21
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

134588

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\a\b\d_00000000_\b\out\x64\Release\vssbridge64.pdb

kernel32

WaitForMultipleObjects WaitForSingleObjectEx GetFileAttributesW GetCurrentDirectoryW lstrcmpiW SetEvent LoadLibraryExW MultiByteToWideChar LoadResource SizeofResource FindResourceW CreateThread WaitForSingleObject GetCommandLineW GetSystemDirectoryW GetCurrentProcess ExpandEnvironmentStringsW GetCurrentProcessId SetLastError GetTempPathW CreateDirectoryW FindFirstFileExW FindNextFileW FindClose FreeResource LockResource SetEndOfFile WriteConsoleW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage ReadConsoleW GetCommandLineA GetSystemInfo GetSystemTimeAsFileTime GetModuleHandleExW FileTimeToSystemTime Sleep WriteFile GetCurrentThreadId FreeLibrary GetModuleFileNameW CreateFileW CloseHandle LoadLibraryW InitializeCriticalSectionAndSpinCount DecodePointer LocalFree GetProcAddress GetModuleHandleW CreateEventW LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection GetLastError GetProcessHeap RaiseException HeapFree HeapAlloc GetLocalTime ReadFile GetConsoleMode GetConsoleCP FlushFileBuffers HeapSize SetFilePointerEx GetFileSizeEx HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetFileType GetStdHandle ExitProcess FreeLibraryAndExitThread ExitThread RtlPcToFileHeader RtlUnwindEx InitializeSListHead QueryPerformanceCounter GetStartupInfoW IsProcessorFeaturePresent WideCharToMultiByte GetStringTypeW EncodePointer SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree LCMapStringW GetLocaleInfoW GetCPInfo IsDebuggerPresent OutputDebugStringW ResetEvent RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess RtlUnwind

user32

PostThreadMessageW TranslateMessage GetSystemMetrics CharUpperW LoadStringW CharNextW DispatchMessageW GetMessageW

advapi32

RegNotifyChangeKeyValue DeregisterEventSource ReportEventW RegisterEventSourceW RegisterServiceCtrlHandlerW SetServiceStatus CreateServiceW DeleteService ControlService CloseServiceHandle OpenServiceW OpenSCManagerW StartServiceCtrlDispatcherW RegQueryInfoKeyW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegSetValueExW RegCreateKeyExW RegQueryValueExW RegCloseKey RegOpenKeyExW

ole32

CoTaskMemFree CoTaskMemAlloc CoTaskMemRealloc StringFromGUID2 CoCreateInstance CoRevokeClassObject CoRegisterClassObject CoInitializeSecurity CoReleaseServerProcess CoAddRefServerProcess CoInitializeEx CoResumeClassObjects CoUninitialize

oleaut32

SysFreeString SysAllocString SysStringLen SysAllocStringByteLen SysStringByteLen RegisterTypeLi UnRegisterTypeLi LoadTypeLi VarUI4FromStr

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-06_3554950d681990df3c8cf2502cbdb1f7_cobalt-strike_icedid_njrat_vidar

kernel32

user32

advapi32

ole32

oleaut32

generic