General
- Target 2026-04-19_c0614b8ff1ed6adf3f5db6fdb4810819_cobalt-strike_elex_icedid_njrat
- Size 699KB
- Sample260419-ca2ewagx2y
- SHA256 7490fc02a2abedcb3da5c4ca13001df856ec7d7c185453b851eedcef17e4733f
- MD5 c0614b8ff1ed6adf3f5db6fdb4810819
- SHA1 09355882aa38ad25d2895c99116b03bbdba990cc
- SHA512 8800784c16fbbd1a4a818860b628d3437d41c30ad66e394325959a60cc43494191b1df869bb8e8ef862374b6d418bd48e30be488cece11e7008afba40f0f7da3
- SSDEEP 12288:OYOvFxKdVscANlLtDf8ZazU3flsm09zOK8oY2guvhlontRkTWnwo2d4Qier5+nZL:aKnshN9tT8B3tsmOzt8X6vhlontqTOwo
- TLSH T1E5E4010E7659D8D3DA728F34AC7485C1673268DB7E915BAB25C4130D8C6B2B88E27F34
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-19_c0614b8ff1ed6adf3f5db6fdb4810819_cobalt-strike_elex_icedid_njrat.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-19_c0614b8ff1ed6adf3f5db6fdb4810819_cobalt-strike_elex_icedid_njrat.exe
Resource
win11-20260130-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_c0614b8ff1ed6adf3f5db6fdb4810819_cobalt-strike_elex_icedid_njrat
- Size 699KB
- SHA256 7490fc02a2abedcb3da5c4ca13001df856ec7d7c185453b851eedcef17e4733f
- MD5 c0614b8ff1ed6adf3f5db6fdb4810819
- SHA1 09355882aa38ad25d2895c99116b03bbdba990cc
- SHA512 8800784c16fbbd1a4a818860b628d3437d41c30ad66e394325959a60cc43494191b1df869bb8e8ef862374b6d418bd48e30be488cece11e7008afba40f0f7da3
- SSDEEP 12288:OYOvFxKdVscANlLtDf8ZazU3flsm09zOK8oY2guvhlontRkTWnwo2d4Qier5+nZL:aKnshN9tT8B3tsmOzt8X6vhlontqTOwo
- TLSH T1E5E4010E7659D8D3DA728F34AC7485C1673268DB7E915BAB25C4130D8C6B2B88E27F34
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.