General
- Target 2026-07-03_7a29c01fad8426422cc5ef38a171162a_icedid_njrat
- Size 1.2MB
- Sample260703-22l7psds8n
- SHA256 df25f377bb1cdb34b17ee16f99a8f175f27c2caa45b032426ecabdc6d6ee0ee5
- MD5 7a29c01fad8426422cc5ef38a171162a
- SHA1 0e0c77ed6f9e726b027b7471113fab7b4e4defe5
- SHA512 1c476c01314aa694c3fb0454917f96b84dd192429c25d7826e65229e96dbcb69063facbf28d1ad99966c7a7c8b236355d77d030fcf0df7aff3882ab50bc4a942
- SSDEEP 12288:9cIXRg7pfz8MB8Gm21NDJef+5BkAEYEsNNpyiXhlHB6jNTBcgGzvAIK:hg7pfz8Y8BAYcNpDhINWzvxK
- TLSH T10155C54BE7B611D5F4BAC1399562312AFC7234A18738DBC792859A0E5B30FE4AD3E740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_7a29c01fad8426422cc5ef38a171162a_icedid_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_7a29c01fad8426422cc5ef38a171162a_icedid_njrat.exe
Resource
win11ltsc2024-20260629-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_7a29c01fad8426422cc5ef38a171162a_icedid_njrat
- Size 1.2MB
- SHA256 df25f377bb1cdb34b17ee16f99a8f175f27c2caa45b032426ecabdc6d6ee0ee5
- MD5 7a29c01fad8426422cc5ef38a171162a
- SHA1 0e0c77ed6f9e726b027b7471113fab7b4e4defe5
- SHA512 1c476c01314aa694c3fb0454917f96b84dd192429c25d7826e65229e96dbcb69063facbf28d1ad99966c7a7c8b236355d77d030fcf0df7aff3882ab50bc4a942
- SSDEEP 12288:9cIXRg7pfz8MB8Gm21NDJef+5BkAEYEsNNpyiXhlHB6jNTBcgGzvAIK:hg7pfz8Y8BAYcNpDhINWzvxK
- TLSH T10155C54BE7B611D5F4BAC1399562312AFC7234A18738DBC792859A0E5B30FE4AD3E740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.