2026-10-21_9190ba9dfc7545e29fca923b7d9cdb60_cobalt-strike_icedid_njrat

General

Target
2026-10-21_9190ba9dfc7545e29fca923b7d9cdb60_cobalt-strike_icedid_njrat
Size 460KB
Sample261022-vt1a2aswes
SHA256 ce6f1f375d970bd9f6e7f6fedba69f46af498f148b07cf8784247a6b225647f3
MD5 9190ba9dfc7545e29fca923b7d9cdb60
SHA1 2d1e796442112b9e89171bde56f78cca04ca3e6f
SHA512 defafd458c239397765b3701ef5b13dabfd3189752f4568c048df23147cfe46e99828dc7fb5cecf201530d7ffc4776607d2f2e0a5b078f47b3e4001ec6da3c2c
SSDEEP 12288:cLILCsXc+L25iy0Pjw51zmcNlmitm2gFDsRKpr:2sXc+L2s3K1z4EIr
TLSH
T173A40286D3848ED6D4370A78209A4D542B39ADD40790CF1B624CF0757F523A9AF7EFA8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-21_9190ba9dfc7545e29fca923b7d9cdb60_cobalt-strike_icedid_njrat

File Explorer

2026-10-21_9190ba9dfc7545e29fca923b7d9cdb60_cobalt-strike_icedid_njrat

.exe 460KB

2026-10-21_9190ba9dfc7545e29fca923b7d9cdb60_cobalt-strike_icedid_njrat

IMPHASH 291da469b1f2127f44917a1d0480dedf
SHA256 ce6f1f375d970bd9f6e7f6fedba69f46af498f148b07cf8784247a6b225647f3
MD5 9190ba9dfc7545e29fca923b7d9cdb60
SHA1 2d1e796442112b9e89171bde56f78cca04ca3e6f
SHA512 defafd458c239397765b3701ef5b13dabfd3189752f4568c048df23147cfe46e99828dc7fb5cecf201530d7ffc4776607d2f2e0a5b078f47b3e4001ec6da3c2c
SSDEEP 12288:cLILCsXc+L25iy0Pjw51zmcNlmitm2gFDsRKpr:2sXc+L2s3K1z4EIr
TLSH
T173A40286D3848ED6D4370A78209A4D542B39ADD40790CF1B624CF0757F523A9AF7EFA8
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

194720

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\projects\krhdiffpatch\hdiffpatch\builds\vc\Release\x64\hpatchz.pdb

c.u

QbUNTEJUjABm NnhglqOrlgbarzPijey tADNppSGofOZpvZphnlWfTLzN MWfIFKRNgOXQjiSntTh bGetSabrWkIbfuOwKOBhQTN UXwIADoFSdPb bMFMugoujnbytMBvRPW ctqYgYuFVrly CailcMxdHCUKpGf EUPhrTSUjt LGYpObASHAA hqpwkPhHAVARyssY LLcNXPyRjrXsW vBpTwqjCTgKJ KjRMEtFBamHauPKvjpQu FGDsurExxQMKPJxmlKKL ScVhzgwUHuzlFbaaRufBh JKexrsxjtRKJmCQDimiIzmWDQ DNbMkstvOVsOjMUeH RxssTOWjiRpTePWiyInkzG tKNZuYWtjWzEshUx FPmoMDyWBfNPUytdAOMWTHVp ngPgSpGplqStHUJqAvttvPKNVtm lknojhaKCCGLhriHV oYuaUFCsmXlYhIfm vyijCAjvnnFSwmybrTA YRrFTFlSpEWmKbcWzj sqguBPBFBdVbetUpciqMGzH TvAUaDWgKYSyuCsqUnX ZOYSSsJIbQsgvSHIi sDGylIWvodjWjot HIPaBhTtudeVwwbo pUyfCqlGmcjP aUvZheLASef HRmAkhcepHqV ZVoijDSTFvcvTCykXruphwzvxagpQCKEoXzfu cSgVGumv lEJPDqDPFRV EYDsmdXUwKE xfboFBp dAVbQYJvVTh lxTowjwjDpiQVL GGuBockQVTOCLP JwXFUGRqoNByK wmlecfiUsFxYeA uOzeRVtGoaTXSkRyb rExUDSDdePGNPVaK JUEXgEXdsnE msFSQxGZZspPr FsweYwUYqRkHIPAexVXFXKOAiF vztLelhiOPU sFBsydGqOMSjb wNwljrkCtQMszSfvaLMjLwtbACmzcJh skdYPwkbuztHfnTJbqeJ yDNhvllWECW toYBuMPWQSDcbLuy sRUAnWgJohZ aUTbtQJQ LWsdYpiNxcI ZWsRPxrhXZaQBWKgny FTRiQKHYpxUt ANlYpDacd FkBLJAtzkJfQrmlRHv uyXKmKPpnXoEKAt LHQSXYCmifdCDJg yZNDJbZXO pymHfeUK SANOdxbQ KKzDgxYAgFZ nvoWCYulpmN KBkZsvo pxRtKiqHHoYSde siEMizCnUoDI ZUfjBnYSqzAUXV sxEhkwCkgfAAZ mRmgTGGlxYgfvArlGd AwZymBOOrsvkgBsoHm cagFBGuihNANJPvFxOkv AliutzhaYBTMSzkE UGgwkYmGqNRm WDPmpVSaxDdQcNsF HbHvSRTGFzhwGkMzNd jizwvtLTghybAh MofRJojXgaCWV ygnSGfXlanidnTBX QEinLNebWnHL zlwMsUcyFeb JOaLKFkbb oqhjRlfLaNMcRWXO amIuzgTQOeVTU VnWqgCMxShBgbjz gRauTH WYpGinqH TCVaGWGvO UuCiFjvBqHeOHuqmOpMvTc QFPGxDruKRZDJOoGMSeMEEp TzEJzVsWrTHvNLQlmXuzcku EcUolrjmwzvOnE StzKSffnrbtlra WqLDpxwJwJbmxOaEnXXFeN cFamHSAN fIzCVWufMcCmS

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-21_9190ba9dfc7545e29fca923b7d9cdb60_cobalt-strike_icedid_njrat

c.u

generic