2026-10-26_73ee08c9c27134ba49909ca7ca333c90_icedid_njrat_remcos_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-26_73ee08c9c27134ba49909ca7ca333c90_icedid_njrat_remcos_vidar
Size 1.4MB
Sample261027-rt9ypaew7p
SHA256 2e94cbca1b88337d23331055f60d9b4656997a018fe9fe6566115a4f20385511
MD5 73ee08c9c27134ba49909ca7ca333c90
SHA1 edaf079f3ce7ec1eede463a6e0d61350f3f61026
SHA512 2f92f9745d8256bcc71a8e19a9512c3809419d4bade2be772a66335a8eab6bc05d39a21fe251628c1bdebe0cfb2438ed64eba39b64844dbc09622d7bfb3136f9
SSDEEP 24576:3TVe23FrHmEGQe6gHkcsKb3Xrqk9th8AaUG1QOTT1VKaL+BgTAzy9cGQAVRcUp:jVe23FrGEGQe6gHkcxnrPtcS6T1dCmlN
TLSH
T1AD65AC12B7209965C4161A398970D7F19730FC088BA5A38736EF6D6BAF6F5C64F63380
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-26_73ee08c9c27134ba49909ca7ca333c90_icedid_njrat_remcos_vidar

File Explorer

2026-10-26_73ee08c9c27134ba49909ca7ca333c90_icedid_njrat_remcos_vidar

.exe 1.4MB

2026-10-26_73ee08c9c27134ba49909ca7ca333c90_icedid_njrat_remcos_vidar

IMPHASH 07dace2353397c87353351db6fb36be9
SHA256 2e94cbca1b88337d23331055f60d9b4656997a018fe9fe6566115a4f20385511
MD5 73ee08c9c27134ba49909ca7ca333c90
SHA1 edaf079f3ce7ec1eede463a6e0d61350f3f61026
SHA512 2f92f9745d8256bcc71a8e19a9512c3809419d4bade2be772a66335a8eab6bc05d39a21fe251628c1bdebe0cfb2438ed64eba39b64844dbc09622d7bfb3136f9
SSDEEP 24576:3TVe23FrHmEGQe6gHkcsKb3Xrqk9th8AaUG1QOTT1VKaL+BgTAzy9cGQAVRcUp:jVe23FrGEGQe6gHkcxnrPtcS6T1dCmlN
TLSH
T1AD65AC12B7209965C4161A398970D7F19730FC088BA5A38736EF6D6BAF6F5C64F63380
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

111960

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\p4\compile_del03\del03\code\_out\x64\Release\Launcher.pdb

winmm

joyGetPosEx

kernel32

Process32FirstW CloseHandle GetSystemInfo LoadLibraryW ExitProcess GetCurrentProcessId GlobalMemoryStatusEx CreateProcessW GetModuleHandleW FreeLibrary WideCharToMultiByte CreateRemoteThread SetThreadErrorMode SetDllDirectoryW GetExitCodeProcess SetEndOfFile HeapReAlloc HeapSize ReadConsoleW ReadFile FlushFileBuffers GetStringTypeW SetStdHandle GetProcessHeap LCMapStringW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo FormatMessageW GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose SetFilePointerEx GetConsoleMode GetConsoleOutputCP GetFileType HeapAlloc HeapFree WriteFile GetStdHandle GetModuleFileNameW GetModuleHandleExW TlsFree TlsSetValue TlsGetValue TlsAlloc EncodePointer RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry Sleep MultiByteToWideChar CreateToolhelp32Snapshot OpenProcess GetFileAttributesW WaitForSingleObject SetErrorMode K32GetModuleFileNameExW GetCurrentProcess SetUnhandledExceptionFilter GetUserDefaultUILanguage GetProcAddress GetLastError SetEnvironmentVariableW FindResourceW Process32NextW LoadResource LockResource SizeofResource WriteConsoleW GetOEMCP RtlCaptureContext CreateEventW WaitForSingleObjectEx ResetEvent SetEvent DeleteCriticalSection InitializeCriticalSectionAndSpinCount VerSetConditionMask VerifyVersionInfoW GetFullPathNameW LoadLibraryExW SetLastError LocalFree CreateFileW EnterCriticalSection LeaveCriticalSection InitializeCriticalSection LocalAlloc GetSystemDirectoryW

user32

FillRect GetFocus GetSysColor UpdateWindow BeginPaint ReleaseDC GetDC DrawTextW SetWindowTextW SendMessageW TrackMouseEvent GetMonitorInfoW EnableWindow GetWindowThreadProcessId CharUpperW IsWindowVisible PeekMessageW IsWindowEnabled EnumWindows SetCursor SetForegroundWindow CharUpperA GetActiveWindow MessageBoxW GetMessageW DefWindowProcW MonitorFromPoint GetWindowRect UnregisterClassW RegisterClassExW ShowWindow GetAsyncKeyState DispatchMessageW SetTimer IsDialogMessageW InvalidateRect ClientToScreen GetTopWindow GetForegroundWindow AdjustWindowRect TranslateMessage LoadIconW LoadCursorW SetCapture PostQuitMessage ReleaseCapture GetCursorPos GetWindowLongW SetScrollInfo SetFocus SetScrollPos ScrollWindow SetWindowPos CallWindowProcW DestroyWindow SetWindowLongPtrW CreateWindowExW RedrawWindow MoveWindow EndPaint

gdi32

CreateCompatibleBitmap SetBkColor CreateCompatibleDC DeleteDC AddFontMemResourceEx AddFontResourceExW CreateFontW SetDCBrushColor SelectObject GetStockObject SetTextColor SetBkMode CreateDIBSection GetObjectW DeleteObject BitBlt

advapi32

RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW

shell32

ShellExecuteW

ole32

CoInitializeEx CoUninitialize CoCreateInstance

dxgi

CreateDXGIFactory

msimg32

AlphaBlend

uxtheme

DrawThemeBackground OpenThemeData

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

Name

.text

Size

215KB

Virtual Size

215KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

75KB

Virtual Size

74KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

63KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

591KB

Virtual Size

591KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

568KB

Virtual Size

572KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-26_73ee08c9c27134ba49909ca7ca333c90_icedid_njrat_remcos_vidar

winmm

kernel32

user32

gdi32

advapi32

shell32

ole32

dxgi

msimg32

uxtheme

version

generic