2026-10-22_f183d48e1a23e14325744a1135d2378c_darkgate_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar

General

Target
2026-10-22_f183d48e1a23e14325744a1135d2378c_darkgate_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
Size 6.6MB
Sample261023-dddnnazt2m
SHA256 5e860cc02a0bc9699a0f23586f68939cf82f73704eba67ed50c07728a92e64ec
MD5 f183d48e1a23e14325744a1135d2378c
SHA1 9495060109fe20b044e0b08ae972cf886b8edb5c
SHA512 2f1e60a1e74a9460007a1a77bc0ded87f509aa52993ff7c4cec5fe26e3fce2002893e1ad4f667a3d4feabd473d423f53145dfc018eb561d466521af2feb6362a
SSDEEP 98304:CHxQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22Im6dB:CCeGZF6bUpMBF1p/kjRm4OWi2YdB
TLSH
T1D166011DEE944FFDDD638134C962D73DA6647C250A20F64B139CB61ADE32FA0292B712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_f183d48e1a23e14325744a1135d2378c_darkgate_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar

File Explorer

2026-10-22_f183d48e1a23e14325744a1135d2378c_darkgate_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar

.exe 6.6MB

2026-10-22_f183d48e1a23e14325744a1135d2378c_darkgate_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar

SHA256 5e860cc02a0bc9699a0f23586f68939cf82f73704eba67ed50c07728a92e64ec
MD5 f183d48e1a23e14325744a1135d2378c
SHA1 9495060109fe20b044e0b08ae972cf886b8edb5c
SHA512 2f1e60a1e74a9460007a1a77bc0ded87f509aa52993ff7c4cec5fe26e3fce2002893e1ad4f667a3d4feabd473d423f53145dfc018eb561d466521af2feb6362a
SSDEEP 98304:CHxQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22Im6dB:CCeGZF6bUpMBF1p/kjRm4OWi2YdB
TLSH
T1D166011DEE944FFDDD638134C962D73DA6647C250A20F64B139CB61ADE32FA0292B712
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

2156352

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

2.5MB

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

280KB

Virtual Size

284KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

149KB

Virtual Size

149KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

1024B

Virtual Size

896B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

84KB

Virtual Size

83KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

37KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=17, id=241, version=40116,

count=170, id=243, version=40116,

count=28, id=242, version=40116,

count=9, id=259, version=25305,

count=41, id=260, version=25305,

count=124, id=261, version=25305,

count=8, id=109, productName=VS2005 build 50727, version=50727,

count=1, id=125, productName=VS2005 build 50727, version=50727,

count=1, id=259, version=25203,

count=1, id=263, version=25203,

count=11, id=260, version=25203,

count=1, id=262, version=25203,

count=21, id=257, version=25203,

count=631, id=1, productName=Unmarked objects,

count=15, id=260, productName=VS2017 v15.3 build 25506, version=25506,

count=1, id=259, productName=VS2017 v15.3 build 25506, version=25506,

count=1132, id=261, productName=VS2017 v15.3 build 25506, version=25506,

count=1, id=255, productName=VS2017 v15.3 build 25506, version=25506,

count=1, id=258, productName=VS2017 v15.3 build 25506, version=25506,

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_f183d48e1a23e14325744a1135d2378c_darkgate_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar

generic