General

  • Target
    2026-09-21_085086c4be6fa1d9cad554cf78878873_icedid_luca-stealer_njrat_stealc
  • Size 7.6MB
  • Sample260922-sql8wsxfpd
  • SHA256 f54a9261c0942cdd9bc22094b09eb106121137d369dc26c05a0a2651b3fc67c8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Targets

    • Target
      2026-09-21_085086c4be6fa1d9cad554cf78878873_icedid_luca-stealer_njrat_stealc
    • Size 7.6MB
    • SHA256 f54a9261c0942cdd9bc22094b09eb106121137d369dc26c05a0a2651b3fc67c8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Detects DonutLoader

    • Family: DonutLoader

      DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks