Overview

overview

10

Static

static

3

mm/yy/neth...bu.dll

windows10-2004-x64

10

mm/yy/neth...bu.dll

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    mm.zip
  • Size 446KB
  • Sample260501-amf9csft2p
  • SHA256 56fcb27f14b2e4171b907393ee34f917266170af2a6cffd1214236534b8797cd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
donutloaderloaderspyware

Malware Config

Targets

    • Target
      mm/yy/nethelper_0jrnbu.dll
    • Size 14KB
    • SHA256 8e248505b6cd87d2e27ed40541c2b2933113380da27bc75458d62d419e732f8d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    donutloaderloaderspyware

    • Detects DonutLoader

      loader

    • Family: DonutLoader

      DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.

      loaderdonutloader

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks