General
- Target 2026-04-19_8dd343c2fa96eb085c7d7070ce8e3715_elex_icedid_njrat
- Size 1.8MB
- Sample260419-krdddaey7j
- SHA256 6b277fd005f469522f3200cf31261273dd343571581a267bafd2ab971d798293
- MD5 8dd343c2fa96eb085c7d7070ce8e3715
- SHA1 e1d4a7927c269146b724d3b38d37ab200c0b8613
- SHA512 3df157325ffceae2ea01d3c8b03024feaf4890990e69775d18caba1db000b949ac0e92619f2b65857c5d4ee8c5943c51561609f9ec17bc80e4bd504e1951e428
- SSDEEP 24576:ArM9IPl7rduFeiUSD1lrT64xjG+cqu+YeUYHuvjaEYo8DDyC9YCiiu:YvOdD15Fu+YjYOmEYo8DDyIYC
- TLSH T17795230D7B9AA8D6D9714E38BC39925146337C53BE615AAB2CC0530E8D671F88E36F31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-19_8dd343c2fa96eb085c7d7070ce8e3715_elex_icedid_njrat.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-19_8dd343c2fa96eb085c7d7070ce8e3715_elex_icedid_njrat.exe
Resource
win11-20260130-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_8dd343c2fa96eb085c7d7070ce8e3715_elex_icedid_njrat
- Size 1.8MB
- SHA256 6b277fd005f469522f3200cf31261273dd343571581a267bafd2ab971d798293
- MD5 8dd343c2fa96eb085c7d7070ce8e3715
- SHA1 e1d4a7927c269146b724d3b38d37ab200c0b8613
- SHA512 3df157325ffceae2ea01d3c8b03024feaf4890990e69775d18caba1db000b949ac0e92619f2b65857c5d4ee8c5943c51561609f9ec17bc80e4bd504e1951e428
- SSDEEP 24576:ArM9IPl7rduFeiUSD1lrT64xjG+cqu+YeUYHuvjaEYo8DDyC9YCiiu:YvOdD15Fu+YjYOmEYo8DDyIYC
- TLSH T17795230D7B9AA8D6D9714E38BC39925146337C53BE615AAB2CC0530E8D671F88E36F31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.