General
- Target Manikaran Payment 05112025.jpeg.vbs
- Size 644KB
- Sample251108-vansws1ram
- SHA256 eb92fd512aced6503edbe52a19c8b5d225e18fa65a079e250c8ddb90f387c4d4
Score
10/10
Malware Config
Targets
-
- Target Manikaran Payment 05112025.jpeg.vbs
- Size 644KB
- SHA256 eb92fd512aced6503edbe52a19c8b5d225e18fa65a079e250c8ddb90f387c4d4
Score10/10-
Detects DonutLoader
-
DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.
-
Donutloader family
-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.