General
- Target 68ceae64d7bd6c09e24598da9a4ab1e52f08a896384e8d3bc725c3688298d1bb
- Size 650KB
- Sample260604-ztnpfsey7v
- SHA256 68ceae64d7bd6c09e24598da9a4ab1e52f08a896384e8d3bc725c3688298d1bb
- MD5 a53d2eb503a01d00774ef28ed296387b
- SHA1 efcf359cf8314b21d66150f132a3e43b8c752538
- SHA512 b3e09df51c1712486ee63fa8354600f0fb538173234bc0896757e46dacea58aaefca8a13c798f88cf1b0d46946469e3c268f3c614ede8773e6842b76b72b4aae
- SSDEEP 12288:j/cniSvdcBwkVfWEtNNJLjvOlVHLGIt+3n5s/pWCFpv0I0:j/cniSvSBD4EtHJLjvsrV+XUpBFt0
- TLSH T13EE42352EDA09496D351B774F357AB56A8B1EF802845BC9F03F1803C1FB9A5A1F3E10A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
68ceae64d7bd6c09e24598da9a4ab1e52f08a896384e8d3bc725c3688298d1bb.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
68ceae64d7bd6c09e24598da9a4ab1e52f08a896384e8d3bc725c3688298d1bb.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 68ceae64d7bd6c09e24598da9a4ab1e52f08a896384e8d3bc725c3688298d1bb
- Size 650KB
- SHA256 68ceae64d7bd6c09e24598da9a4ab1e52f08a896384e8d3bc725c3688298d1bb
- MD5 a53d2eb503a01d00774ef28ed296387b
- SHA1 efcf359cf8314b21d66150f132a3e43b8c752538
- SHA512 b3e09df51c1712486ee63fa8354600f0fb538173234bc0896757e46dacea58aaefca8a13c798f88cf1b0d46946469e3c268f3c614ede8773e6842b76b72b4aae
- SSDEEP 12288:j/cniSvdcBwkVfWEtNNJLjvOlVHLGIt+3n5s/pWCFpv0I0:j/cniSvSBD4EtHJLjvsrV+XUpBFt0
- TLSH T13EE42352EDA09496D351B774F357AB56A8B1EF802845BC9F03F1803C1FB9A5A1F3E10A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.