2026-11-03_9c3b440ba0c4c4ea2127461bbfb32912_icedid_njrat

General

Target
2026-11-03_9c3b440ba0c4c4ea2127461bbfb32912_icedid_njrat
Size 1.1MB
Sample261104-pxdcsade53
SHA256 f42a2c3ac9d9fc25f88c8278b705bfd8bcf02cba0e648e429aa88519c823e364
MD5 9c3b440ba0c4c4ea2127461bbfb32912
SHA1 ba6080fbc0bbe638a6d2141d64818e3f1113b4a4
SHA512 306dadbda5778df77d01225cca897472717ef6ac708088a627ea7d0b235c58dac077d8bf9ae7cfd565c878410bb7bebf119d0f14fc6f43b44e7184931b7983de
SSDEEP 24576:m0d241QC0Bo8gWqGCUL4DS/WevTZ2uWMUIHcaN5OdqKarqfNwjWiSP7PzYS4UR1T:ma241gBo81qG/L4JecMURgDU9+dPF6oO
TLSH
T12B356567BE26135ACF9286B4BC249970FF5CC14E152F1578B4DB0A8CA20A04DFFEC569
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-03_9c3b440ba0c4c4ea2127461bbfb32912_icedid_njrat

File Explorer

2026-11-03_9c3b440ba0c4c4ea2127461bbfb32912_icedid_njrat

.exe 1.1MB

2026-11-03_9c3b440ba0c4c4ea2127461bbfb32912_icedid_njrat

IMPHASH 85288fc3a08f11914a3bc61f9a897273
SHA256 f42a2c3ac9d9fc25f88c8278b705bfd8bcf02cba0e648e429aa88519c823e364
MD5 9c3b440ba0c4c4ea2127461bbfb32912
SHA1 ba6080fbc0bbe638a6d2141d64818e3f1113b4a4
SHA512 306dadbda5778df77d01225cca897472717ef6ac708088a627ea7d0b235c58dac077d8bf9ae7cfd565c878410bb7bebf119d0f14fc6f43b44e7184931b7983de
SSDEEP 24576:m0d241QC0Bo8gWqGCUL4DS/WevTZ2uWMUIHcaN5OdqKarqfNwjWiSP7PzYS4UR1T:ma241gBo81qG/L4JecMURgDU9+dPF6oO
TLSH
T12B356567BE26135ACF9286B4BC249970FF5CC14E152F1578B4DB0A8CA20A04DFFEC569
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

9440

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CreateFileA GetFileSizeEx ReadFile CloseHandle HeapAlloc HeapFree GetProcessHeap GetModuleHandleA GetProcAddress LoadResource LockResource SizeofResource FindResourceW LoadLibraryA RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW CreateFileW RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW RaiseException GetStdHandle WriteFile GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW GetACP CompareStringW LCMapStringW GetFileType FlushFileBuffers GetConsoleCP GetConsoleMode FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetStdHandle GetStringTypeW SetFilePointerEx WriteConsoleW HeapSize HeapReAlloc

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-03_9c3b440ba0c4c4ea2127461bbfb32912_icedid_njrat

kernel32

generic