General
- Target 2026-09-08_ac79bc258032f74f088edb32ecafcc00_icedid
- Size 11.3MB
- Sample260910-d3a9tsx1dy
- SHA256 fbe4b860c5d4607b3e5c1ef05a9bc80becda65d9adb778bdb08fd9d5187ff4f2
- MD5 ac79bc258032f74f088edb32ecafcc00
- SHA1 cb194ebb4a2e77046bfeb093dd8690892598925a
- SHA512 fb4ab7a8ac82963cea547d7fad78a115714ba1ed6bf7553240021d2a528f2bffcad6414ed82dad7c2237e9ef56867489a0f669e9a223c9e3ba1d67554debee83
- SSDEEP 196608:o7mTNrN5NaC2YQgw0WY/Qu5elQYv06bwdmskEq2I+fx1GF0POnYbrmuosbL:oYdaCY70WyQqeA6bdybzx1GSPO/sbL
- TLSH T1C2C633A2FBAE24E1F968447BB9D8595637122E3383361A734FD5170C2F52AD0CDF2942
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_ac79bc258032f74f088edb32ecafcc00_icedid.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_ac79bc258032f74f088edb32ecafcc00_icedid.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_ac79bc258032f74f088edb32ecafcc00_icedid
- Size 11.3MB
- SHA256 fbe4b860c5d4607b3e5c1ef05a9bc80becda65d9adb778bdb08fd9d5187ff4f2
- MD5 ac79bc258032f74f088edb32ecafcc00
- SHA1 cb194ebb4a2e77046bfeb093dd8690892598925a
- SHA512 fb4ab7a8ac82963cea547d7fad78a115714ba1ed6bf7553240021d2a528f2bffcad6414ed82dad7c2237e9ef56867489a0f669e9a223c9e3ba1d67554debee83
- SSDEEP 196608:o7mTNrN5NaC2YQgw0WY/Qu5elQYv06bwdmskEq2I+fx1GF0POnYbrmuosbL:oYdaCY70WyQqeA6bdybzx1GSPO/sbL
- TLSH T1C2C633A2FBAE24E1F968447BB9D8595637122E3383361A734FD5170C2F52AD0CDF2942
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.