General
- Target 2026-05-09_7978ac89d0f1ae7686685abb059f6474_elex_icedid_njrat
- Size 1.7MB
- Sample260509-2arccady3y
- SHA256 cdc8b3ea8d8da1333e69a91f0738e8e23e8d74082d7a0f34280eec4194375bab
- MD5 7978ac89d0f1ae7686685abb059f6474
- SHA1 919aabe0250556e2a67b32025a5fec2966845e1d
- SHA512 dc2f04b1817dfcb1e4a82f23c294edc93e28ae42450cebea32bf3fa93e8a3f3de510294aa1739ee0d14f3578a3cdf41e50bd64d0b5336b943ab024a4239131d9
- SSDEEP 49152:Wlt2FcdX3yjKAW9LuyHVuBNoZLZ8sVd/TPbc:ytfp3yjnv83/TPbc
- TLSH T1B985121E766998D7CA329E34AC7087D26733A8D79F415A7758D0430D8C6B2B88E77E30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-09_7978ac89d0f1ae7686685abb059f6474_elex_icedid_njrat.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-09_7978ac89d0f1ae7686685abb059f6474_elex_icedid_njrat.exe
Resource
win11-20260130-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-09_7978ac89d0f1ae7686685abb059f6474_elex_icedid_njrat
- Size 1.7MB
- SHA256 cdc8b3ea8d8da1333e69a91f0738e8e23e8d74082d7a0f34280eec4194375bab
- MD5 7978ac89d0f1ae7686685abb059f6474
- SHA1 919aabe0250556e2a67b32025a5fec2966845e1d
- SHA512 dc2f04b1817dfcb1e4a82f23c294edc93e28ae42450cebea32bf3fa93e8a3f3de510294aa1739ee0d14f3578a3cdf41e50bd64d0b5336b943ab024a4239131d9
- SSDEEP 49152:Wlt2FcdX3yjKAW9LuyHVuBNoZLZ8sVd/TPbc:ytfp3yjnv83/TPbc
- TLSH T1B985121E766998D7CA329E34AC7087D26733A8D79F415A7758D0430D8C6B2B88E77E30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects DonutLoader
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.