General

  • Target
    7d6ada6eee4d690b633ea74a9bb482e0c800a351b188abc27a7745a59aa03b8e.zip
  • Size 332KB
  • Sample260511-gpwkdsfv2n
  • SHA256 7d6ada6eee4d690b633ea74a9bb482e0c800a351b188abc27a7745a59aa03b8e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      crypted.bat
    • Size 449KB
    • SHA256 d6e65a981bbaa6dbce36e07c076654da474542b180c06f2fa0d41a76c093fb1e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects DonutLoader

    • Family: DonutLoader

      DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

MITRE ATT&CK Enterprise v16

Tasks