2026-11-09_31fb10b8dfe50ad69b9ec1d41eeb6c69_cobalt-strike_icedid_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-09_31fb10b8dfe50ad69b9ec1d41eeb6c69_cobalt-strike_icedid_njrat
Size 3.6MB
Sample261110-26311scb95
SHA256 6b9a66e318d5b9f09fb1f1e066c106e15db9d191a799bd1c55faeeb0538fc093
MD5 31fb10b8dfe50ad69b9ec1d41eeb6c69
SHA1 e2606f051a90620502cbea7c9a7665621e1b283d
SHA512 e8dde8756e626c5746056575082ec3ad4cd25269a7d0d2082cc448a24478284f1ac1ca4610119e4156242533858612421224971717d27333ff95284a39fbc97c
SSDEEP 49152:o61d3QhHTelIzW8fRGlqcKhDk6qObzhtHm+a+pVd+B14:oGA0kIlqTkN244
TLSH
T13606A4B061C150C1F4D3EABC3966FDF664727AC621F973E66DC2CE088B6943849DB621
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-09_31fb10b8dfe50ad69b9ec1d41eeb6c69_cobalt-strike_icedid_njrat

File Explorer

2026-11-09_31fb10b8dfe50ad69b9ec1d41eeb6c69_cobalt-strike_icedid_njrat

.exe 3.6MB

2026-11-09_31fb10b8dfe50ad69b9ec1d41eeb6c69_cobalt-strike_icedid_njrat

SHA256 6b9a66e318d5b9f09fb1f1e066c106e15db9d191a799bd1c55faeeb0538fc093
MD5 31fb10b8dfe50ad69b9ec1d41eeb6c69
SHA1 e2606f051a90620502cbea7c9a7665621e1b283d
SHA512 e8dde8756e626c5746056575082ec3ad4cd25269a7d0d2082cc448a24478284f1ac1ca4610119e4156242533858612421224971717d27333ff95284a39fbc97c
SSDEEP 49152:o61d3QhHTelIzW8fRGlqcKhDk6qObzhtHm+a+pVd+B14:oGA0kIlqTkN244
TLSH
T13606A4B061C150C1F4D3EABC3966FDF664727AC621F973E66DC2CE088B6943849DB621
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3694683

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

2.9MB

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

155KB

Virtual Size

154KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

36KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

25KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.obf0

Size

262KB

Virtual Size

264KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.obf1

Size

76KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.obf2

Size

97KB

Virtual Size

100KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-09_31fb10b8dfe50ad69b9ec1d41eeb6c69_cobalt-strike_icedid_njrat

generic