2026-10-22_f55d6287bc6ffdeb55ce0f963bc69c4c_icedid_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_f55d6287bc6ffdeb55ce0f963bc69c4c_icedid_njrat
Size 10.7MB
Sample261023-clsbcay19p
SHA256 4b611e360f434f569177d7ee8c818a08d5b65e5baea0c04628c7406e91d8af88
MD5 f55d6287bc6ffdeb55ce0f963bc69c4c
SHA1 ed3f0ecbee349af77172b3bf6208a924e23d8e44
SHA512 d5a7e8221138c92c5fc8bf05c473424965f39207afe985e84817ffdd01364e61de92e6306a47fa8eaf77086d9b7c1da2912ebc429741a335482d2be59d2a973a
SSDEEP 98304:/qxRpidiV73GrANYo/Y7mgTm05AwJHE6h1LJ70lFb9POZq+t:/X6eAN9g7PAmkw7kFb1OZqU
TLSH
T1B4B62A1A72BA40E1D179C039E903976BDC60304A473D61FB6385DAC97F707E8AA7CB52
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_f55d6287bc6ffdeb55ce0f963bc69c4c_icedid_njrat

File Explorer

2026-10-22_f55d6287bc6ffdeb55ce0f963bc69c4c_icedid_njrat

.exe 10.7MB

2026-10-22_f55d6287bc6ffdeb55ce0f963bc69c4c_icedid_njrat

IMPHASH 6e82442b4ba570aed7cae2104cb9f709
SHA256 4b611e360f434f569177d7ee8c818a08d5b65e5baea0c04628c7406e91d8af88
MD5 f55d6287bc6ffdeb55ce0f963bc69c4c
SHA1 ed3f0ecbee349af77172b3bf6208a924e23d8e44
SHA512 d5a7e8221138c92c5fc8bf05c473424965f39207afe985e84817ffdd01364e61de92e6306a47fa8eaf77086d9b7c1da2912ebc429741a335482d2be59d2a973a
SSDEEP 98304:/qxRpidiV73GrANYo/Y7mgTm05AwJHE6h1LJ70lFb9POZq+t:/X6eAN9g7PAmkw7kFb1OZqU
TLSH
T1B4B62A1A72BA40E1D179C039E903976BDC60304A473D61FB6385DAC97F707E8AA7CB52
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5145376

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\xqcv1\Downloads\semun (1) (1)\semun\build\Semun.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

ntdll

RtlCaptureContext RtlCaptureStackBackTrace RtlVirtualUnwind VerSetConditionMask RtlUnwindEx RtlLookupFunctionEntry RtlUnwind RtlPcToFileHeader

winhttp

WinHttpOpen WinHttpCloseHandle WinHttpConnect WinHttpQueryHeaders WinHttpReceiveResponse WinHttpSendRequest WinHttpOpenRequest WinHttpSetTimeouts WinHttpQueryDataAvailable WinHttpReadData

kernel32

IsThreadAFiber FlsFree FlsSetValue FlsGetValue FlsAlloc SetConsoleCtrlHandler QueryPerformanceCounter QueryPerformanceFrequency FreeLibrary GetModuleHandleA GetProcAddress LoadLibraryA MultiByteToWideChar GetLocaleInfoA GlobalAlloc GlobalUnlock GlobalLock GlobalFree WideCharToMultiByte SetLastError FlushInstructionCache GetSystemInfo VirtualAllocEx VirtualProtectEx VirtualQueryEx VirtualFreeEx GetModuleHandleW GetStdHandle GetConsoleMode SetConsoleMode GetConsoleWindow CloseHandle GetProcessId OpenProcess lstrcmpiW CreateToolhelp32Snapshot Process32FirstW Process32NextW Module32First Module32Next GetModuleFileNameW QueryFullProcessImageNameW MoveFileExW GetExitCodeProcess GetCurrentThread SetThreadPriority ReadProcessMemory SetConsoleTitleA CreateFileA GetFileSizeEx ReadFile HeapAlloc HeapReAlloc HeapFree GetProcessHeap MapViewOfFile UnmapViewOfFile CreateFileMappingA OutputDebugStringW VirtualProtect GetCommandLineA WriteFile ExitProcess FreeLibraryAndExitThread ResumeThread ExitThread CreateThread WriteConsoleW GetFileType HeapValidate HeapSize TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount LoadLibraryExW InterlockedFlushSList InterlockedPushEntrySList VirtualQuery InitializeSListHead GetCurrentProcessId GetStartupInfoW IsDebuggerPresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetStringTypeW LCMapStringEx GetCPInfo CompareStringEx DecodePointer EncodePointer CloseThreadpoolWait SetThreadpoolWait CreateThreadpoolWait CloseThreadpoolTimer WaitForThreadpoolTimerCallbacks SetThreadpoolTimer CreateThreadpoolTimer GetSystemTimeAsFileTime GetCurrentProcessorNumber FlushProcessWriteBuffers CreateSemaphoreExW CreateEventExW InitOnceExecuteOnce DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW EnterCriticalSection CreateSymbolicLinkW GetFileInformationByHandleEx CreateHardLinkW GetOEMCP GetEnvironmentStringsW GetACP IsValidCodePage GetTimeZoneInformation HeapQueryInformation SetFilePointerEx FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetCommandLineW SetEndOfFile CopyFileW CreateDirectoryExW DeviceIoControl ReadConsoleW GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared TryAcquireSRWLockExclusive TryAcquireSRWLockShared SleepConditionVariableSRW Sleep GetCurrentThreadId GetTickCount64 RaiseException WakeConditionVariable WakeAllConditionVariable InitOnceBeginInitialize InitOnceComplete FormatMessageA GetLastError FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetModuleHandleExW IsProcessorFeaturePresent WaitForSingleObjectEx SwitchToThread GetExitCodeThread GetNativeSystemInfo LocalFree GetLocaleInfoEx SetCurrentDirectoryW GetCurrentDirectoryW CreateDirectoryW CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetDiskFreeSpaceExW GetFileAttributesW GetFileAttributesExW GetFileInformationByHandle GetFinalPathNameByHandleW GetFullPathNameW SetFileAttributesW SetFileInformationByHandle SetFileTime GetTempPathW AreFileApisANSI GetLocaleInfoW

user32

GetAsyncKeyState GetKeyboardLayout MonitorFromPoint SetWindowLongA MessageBoxA GetWindowRect UpdateWindow GetSystemMetrics SetWindowDisplayAffinity SetLayeredWindowAttributes DestroyWindow CreateWindowExA RegisterClassExA UnregisterClassA PostQuitMessage DefWindowProcA PeekMessageA DispatchMessageA TranslateMessage FindWindowW GetWindowThreadProcessId EnumWindows IsWindow IsWindowVisible ShowWindow SendInput EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard SetProcessDPIAware MonitorFromWindow LoadCursorA ScreenToClient ClientToScreen GetCursorPos SetCursor SetCursorPos GetClientRect ReleaseDC GetDC GetForegroundWindow IsWindowUnicode ReleaseCapture SetCapture GetCapture GetKeyState GetMessageExtraInfo TrackMouseEvent

gdi32

CreateRectRgn GetDeviceCaps DeleteObject

shell32

SHGetFolderPathA ShellExecuteA ShellExecuteW

d3dcompiler_47

D3DCompile

dwmapi

DwmEnableBlurBehindWindow DwmGetColorizationColor DwmExtendFrameIntoClientArea DwmIsCompositionEnabled

imm32

ImmReleaseContext ImmSetCompositionWindow ImmSetCandidateWindow ImmGetContext

winmm

PlaySoundA

Name

.text

Size

6.1MB

Virtual Size

6.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.5MB

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.7MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

375KB

Virtual Size

375KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.msvcjmc

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

488B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

27KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_f55d6287bc6ffdeb55ce0f963bc69c4c_icedid_njrat

d3d11

d3dx11_43

ntdll

winhttp

kernel32

user32

gdi32

shell32

d3dcompiler_47

dwmapi

imm32

winmm

generic