General
- Target Intel.pc.exe
- Size 18.3MB
- Sample260509-av9wmsgw8w
- SHA256 d9f5c44529fdcdad4d2f7dee12fa18949d4efa088efcfab9f040c5d36085bef5
- MD5 d671a83a51bc6fa2079b96fbb260ac8e
- SHA1 631ffa0a2b9be068b5b53b265357d409506834c6
- SHA512 45297b5daef7f9ef1b21e90e2d9d2a52be2b90e2d5866168c40fd9399d04f127973cf335f96027379859e71729bab208350492ced71eb72dc323104b632c16b8
- SSDEEP 393216:Q6LyHX9UA+LwtMXLYlrFL4sdsNez/kUzYv5sHZUcZ5O/rQFTeFQN4uO+kp4:Q6CUFLmMsVFD4O/jzYv5s5U+O/r9FQNX
- TLSH T1C917331094FF8656D6A2AD3E4695E4C10DADD0F325952BECE432B9681608F0F7BFDA03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Intel.pc.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Intel.pc.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Intel.pc.exe
- Size 18.3MB
- SHA256 d9f5c44529fdcdad4d2f7dee12fa18949d4efa088efcfab9f040c5d36085bef5
- MD5 d671a83a51bc6fa2079b96fbb260ac8e
- SHA1 631ffa0a2b9be068b5b53b265357d409506834c6
- SHA512 45297b5daef7f9ef1b21e90e2d9d2a52be2b90e2d5866168c40fd9399d04f127973cf335f96027379859e71729bab208350492ced71eb72dc323104b632c16b8
- SSDEEP 393216:Q6LyHX9UA+LwtMXLYlrFL4sdsNez/kUzYv5sHZUcZ5O/rQFTeFQN4uO+kp4:Q6CUFLmMsVFD4O/jzYv5s5U+O/r9FQNX
- TLSH T1C917331094FF8656D6A2AD3E4695E4C10DADD0F325952BECE432B9681608F0F7BFDA03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.
-
Clears Windows event logs