General
- Target 1292176168.ps1
- Size 1.7MB
- Sample260428-bybcxsfv5m
- SHA256 336c46188ceff34fea213f7ebb593b8ded856fde47edc0c1ba8380d04377fcb0
- MD5 c153675f6d8fce0fae91c561eba6c4ba
- SHA1 e0bcfb2fc54410671d9ec05d3dc69d4d1ff319ab
- SHA512 77542a6d904c430b16ccabae5b5a1224d31bac9218963f14a32f26c01591b9807e39e252e4299a4d38369e3e6ae4c99fead62eaf34351bfce21d6866b640e4b5
- SSDEEP 12288:aCS0mXySF20rzZUtf8xV28y0wYvN1CmFy3xiiF4iDtXp:xKiSF238xM8yuN/g3nFf5
- TLSH T1288565348B702A63EA7C9D71A24A842C48724961AB6E3D09C271BD190FCFED77C65DC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
1292176168.ps1
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
1292176168.ps1
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 1292176168.ps1
- Size 1.7MB
- SHA256 336c46188ceff34fea213f7ebb593b8ded856fde47edc0c1ba8380d04377fcb0
- MD5 c153675f6d8fce0fae91c561eba6c4ba
- SHA1 e0bcfb2fc54410671d9ec05d3dc69d4d1ff319ab
- SHA512 77542a6d904c430b16ccabae5b5a1224d31bac9218963f14a32f26c01591b9807e39e252e4299a4d38369e3e6ae4c99fead62eaf34351bfce21d6866b640e4b5
- SSDEEP 12288:aCS0mXySF20rzZUtf8xV28y0wYvN1CmFy3xiiF4iDtXp:xKiSF238xM8yuN/g3nFf5
- TLSH T1288565348B702A63EA7C9D71A24A842C48724961AB6E3D09C271BD190FCFED77C65DC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.