General
- Target 2026-09-21_085086c4be6fa1d9cad554cf78878873_icedid_luca-stealer_njrat_stealc
- Size 7.6MB
- Sample260922-sql8wsxfpd
- SHA256 f54a9261c0942cdd9bc22094b09eb106121137d369dc26c05a0a2651b3fc67c8
- MD5 085086c4be6fa1d9cad554cf78878873
- SHA1 3736610429e907dbfe1c0a2cfc25fc89424c890a
- SHA512 3ec68ce8ab8a65b78532e2b01a9b9781ef7d99b1f5fd0df1b520b75a2fc4769792a750033c6e50933035d209cd94212b324aba4f8b5d5a40fb9d0606757d267f
- SSDEEP 98304:T+ijjVMxdAGTZYbT1AxDQjV/Ax7KQAGTZ10tDgnYW:TBPVIdAGWbT1kD+V/kuQAGr+EnYW
- TLSH T1BC86E009E18B4268EF632B3888915723C1B17CC557F0D3C76ACE4A716EA7AF4267E750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-21_085086c4be6fa1d9cad554cf78878873_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-21_085086c4be6fa1d9cad554cf78878873_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-21_085086c4be6fa1d9cad554cf78878873_icedid_luca-stealer_njrat_stealc
- Size 7.6MB
- SHA256 f54a9261c0942cdd9bc22094b09eb106121137d369dc26c05a0a2651b3fc67c8
- MD5 085086c4be6fa1d9cad554cf78878873
- SHA1 3736610429e907dbfe1c0a2cfc25fc89424c890a
- SHA512 3ec68ce8ab8a65b78532e2b01a9b9781ef7d99b1f5fd0df1b520b75a2fc4769792a750033c6e50933035d209cd94212b324aba4f8b5d5a40fb9d0606757d267f
- SSDEEP 98304:T+ijjVMxdAGTZYbT1AxDQjV/Ax7KQAGTZ10tDgnYW:TBPVIdAGWbT1kD+V/kuQAGr+EnYW
- TLSH T1BC86E009E18B4268EF632B3888915723C1B17CC557F0D3C76ACE4A716EA7AF4267E750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.
-
UPX dump on OEP (original entry point)