General
- Target 2026-08-06_8d585f4360464c77311dae3ccf865c5b_icedid
- Size 3.8MB
- Sample260806-dln5cssbrh
- SHA256 5a3cdc024b9b3ef4d2306645437fc27d6c4dafd32510003f6561b934c751628e
- MD5 8d585f4360464c77311dae3ccf865c5b
- SHA1 99cdd6587f832fd57b60607fce71db9271ea3ad0
- SHA512 4041e104a2834b18d208d66c3eb89ebe85302ab0f26248d86c1b0e32d9a6be9a10812cab07f0870a92a7909cab2541b8823c934015e703b12e8aa3c5bd8d438a
- SSDEEP 49152:QgJIuaKr01SMZDcgb/RIwRhV1NuYynPya6MZansI0VMwFgFUTSeY7kPI/8H6GZL5:Ch1ca/Rv9ynPZncLi90YQ7kPtxLqh6v
- TLSH T1C2063353667370FAE2366071D15586295B6AA8B84B903FEF0E0057E45F13BF09F2EB90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_8d585f4360464c77311dae3ccf865c5b_icedid.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_8d585f4360464c77311dae3ccf865c5b_icedid.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_8d585f4360464c77311dae3ccf865c5b_icedid
- Size 3.8MB
- SHA256 5a3cdc024b9b3ef4d2306645437fc27d6c4dafd32510003f6561b934c751628e
- MD5 8d585f4360464c77311dae3ccf865c5b
- SHA1 99cdd6587f832fd57b60607fce71db9271ea3ad0
- SHA512 4041e104a2834b18d208d66c3eb89ebe85302ab0f26248d86c1b0e32d9a6be9a10812cab07f0870a92a7909cab2541b8823c934015e703b12e8aa3c5bd8d438a
- SSDEEP 49152:QgJIuaKr01SMZDcgb/RIwRhV1NuYynPya6MZansI0VMwFgFUTSeY7kPI/8H6GZL5:Ch1ca/Rv9ynPZncLi90YQ7kPtxLqh6v
- TLSH T1C2063353667370FAE2366071D15586295B6AA8B84B903FEF0E0057E45F13BF09F2EB90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.