General
- Target 7d6ada6eee4d690b633ea74a9bb482e0c800a351b188abc27a7745a59aa03b8e.zip
- Size 332KB
- Sample260511-gpwkdsfv2n
- SHA256 7d6ada6eee4d690b633ea74a9bb482e0c800a351b188abc27a7745a59aa03b8e
- MD5 4912eb8d73c1dd9f8744fad7d867dde9
- SHA1 4cbcc4bbd808b8ff4e23781753f5dfebfdbc370d
- SHA512 88ec46f0fd5840ecf1338083062afe463dab5f40d8454141cd73baba537fafc5b78b7c02be3063cffa720f6e2ff0dab3361d15d46efc2177122e13450f98d351
- SSDEEP 6144:X5owQo5B0LF4gW5P9hUy0Q27rpOQGDP6Lg+QPnWf3jF7FRMz4kYYK:pNFCLF4gyPLi43Kg+ynGFRgM
- TLSH T18E742353D1FBEAF7CEC93855FB3214992A562967F250CD2F39C0E4619B2108E969FC80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
crypted.bat
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
crypted.bat
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target crypted.bat
- Size 449KB
- SHA256 d6e65a981bbaa6dbce36e07c076654da474542b180c06f2fa0d41a76c093fb1e
- MD5 370c3f7e672b93f100234238615122fb
- SHA1 6b605ed8283dbe68d95ab8d688200cff4bf5264b
- SHA512 412b42b6c1fd672219f69467a7d3f6fd105853f5a467ac7f1afff414a3e5bf3d19f6abd39d657a649195930088f3b2bb5301acee2480ac1839481a35f34f7a3c
- SSDEEP 12288:Fgeh59T3RcO+8hUmesrWGUOAfWwBpgRMOgRJY:FgeNP+wJWf9pgKY
- TLSH T138A422611A867EED19F4AA1FD34833CFFF11D4B29F92E2824B5E41DE510999F8443A8C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.