2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat
Size 294KB
Sample261101-14k7rayte1
SHA256 4a5fd7e09cc057e89fd7eeb5f118f4e1faf411b9c9341a83965ca193f6ca4669
MD5 9f50d0cba4555b8877d413cb46058f4e
SHA1 cb8fbae6754865e7cab9c8ddf840e561b7c2d73f
SHA512 bc9e8113eaecc2f5bfb8fcc489285340c053facc8c6012b7b7ec40469f0131242d5bc37360a76a73839585661a2f623b24130c718fbcf0711da0438933fceeda
SSDEEP 6144:foxn2B2xF7hHbf3bYkwoHRhHlD6Wm1CBJBUGm:jKFw20af
TLSH
T1C8547D1AA69005FDE5A7817DCD825D42EB727C0607B1EADF079049A31E2B6E0DF3E712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat

File Explorer

2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat

.exe 294KB

2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat

IMPHASH aecb979edeeed615343935de2deab145
SHA256 4a5fd7e09cc057e89fd7eeb5f118f4e1faf411b9c9341a83965ca193f6ca4669
MD5 9f50d0cba4555b8877d413cb46058f4e
SHA1 cb8fbae6754865e7cab9c8ddf840e561b7c2d73f
SHA512 bc9e8113eaecc2f5bfb8fcc489285340c053facc8c6012b7b7ec40469f0131242d5bc37360a76a73839585661a2f623b24130c718fbcf0711da0438933fceeda
SSDEEP 6144:foxn2B2xF7hHbf3bYkwoHRhHlD6Wm1CBJBUGm:jKFw20af
TLSH
T1C8547D1AA69005FDE5A7817DCD825D42EB727C0607B1EADF079049A31E2B6E0DF3E712
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

105596

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ws2_32

WSACleanup WSAStartup closesocket WSAGetLastError inet_pton setsockopt send recv inet_addr htons connect socket

bcrypt

BCryptOpenAlgorithmProvider BCryptCloseAlgorithmProvider BCryptCreateHash BCryptDestroyHash BCryptFinishHash BCryptHashData

shell32

SHGetFolderPathW Shell_NotifyIconW

user32

DefWindowProcW PostQuitMessage RegisterClassExW DispatchMessageW ShowWindow CreatePopupMenu DestroyMenu AppendMenuW TrackPopupMenu TranslateMessage CreateWindowExW IsWindowVisible SetForegroundWindow GetWindowTextW MessageBoxW LoadIconW GetWindowThreadProcessId GetClassNameW EnumWindows GetCursorPos GetMessageW

advapi32

RegOpenKeyExW RegCloseKey RegQueryValueExW

wintrust

WinVerifyTrust

gdiplus

GdipFree GdipAlloc GdiplusStartup GdipCloneImage GdipDisposeImage GdipSaveImageToStream GdipCreateBitmapFromScan0 GdipBitmapLockBits GdipBitmapUnlockBits GdipGetImageEncodersSize GdipGetImageEncoders

ole32

GetHGlobalFromStream CreateStreamOnHGlobal

kernel32

GetStringTypeW SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP GetACP IsValidCodePage FindFirstFileExW SetFilePointerEx GetFileSizeEx GetConsoleOutputCP FlushFileBuffers GetFileType LCMapStringW CompareStringW HeapFree HeapAlloc GetCommandLineW GetCommandLineA WriteFile GetModuleFileNameW GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread LoadLibraryExW TlsFree TlsSetValue HeapSize HeapReAlloc GlobalSize TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection EncodePointer SetLastError RtlUnwindEx RaiseException RtlPcToFileHeader InitializeSListHead IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter GetStdHandle GetEnvironmentVariableW CompareFileTime CreateFileW FindClose FindFirstFileW FindNextFileW GetFileAttributesExW ReadFile CloseHandle GetLastError CreateMutexW Sleep GetProcessTimes GetCurrentProcess GetCurrentProcessId ExitProcess TerminateProcess OpenProcess GetTickCount GetTickCount64 GetWindowsDirectoryW GetModuleHandleW lstrcpynW QueryFullProcessImageNameW MultiByteToWideChar WideCharToMultiByte FreeConsole GetConsoleMode WriteConsoleW SetConsoleOutputCP GetConsoleWindow CreateToolhelp32Snapshot Process32FirstW Process32NextW Module32FirstW Module32NextW FreeLibrary GetProcAddress LoadLibraryW GlobalAlloc GlobalUnlock GlobalLock GlobalFree GetCurrentThreadId ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive QueryPerformanceCounter WakeAllConditionVariable SleepConditionVariableSRW GetSystemTimeAsFileTime RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat

ws2_32

bcrypt

shell32

user32

advapi32

wintrust

gdiplus

ole32

kernel32

generic