donutloader | 505c14a562732c086bd2c132d863a57b295776f244d97414f793aca4d5926611

Sharing

Copy URL Twitter E-mail

General

Target
Release.zip
Size 22.8MB
Sample260620-ejg4pset3x
SHA256 505c14a562732c086bd2c132d863a57b295776f244d97414f793aca4d5926611
MD5 d4e10e180be5939b828636b4891f6705
SHA1 24f3d046b28378a18bfc36114538e1db0bfcde32
SHA512 5ed4bd20a069829b6d1aa66c5c90808da6348da18883191d4533db875ab428050f712b69decd0de70832146b37595e15be29f0ae3a48e306d776528b0af4eced
SSDEEP 393216:yNhMVVtEIkPOvoCbRZhIzSzOvpBEYf9vMmQ2OErks47i/uX7ZWlTZ5ue:ghrAvDdZCG6vpSY1kmQ2ks4+DVjx
TLSH
T1F73733E8DB21440FD4D23B754A4E0523FBBAC125573A646E34191EE7ACD3B612B87E38
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  Release.zip
- Size 22.8MB
- SHA256 505c14a562732c086bd2c132d863a57b295776f244d97414f793aca4d5926611
- MD5 d4e10e180be5939b828636b4891f6705
- SHA1 24f3d046b28378a18bfc36114538e1db0bfcde32
- SHA512 5ed4bd20a069829b6d1aa66c5c90808da6348da18883191d4533db875ab428050f712b69decd0de70832146b37595e15be29f0ae3a48e306d776528b0af4eced
- SSDEEP 393216:yNhMVVtEIkPOvoCbRZhIzSzOvpBEYf9vMmQ2OErks47i/uX7ZWlTZ5ue:ghrAvDdZCG6vpSY1kmQ2ks4+DVjx
- TLSH
  T1F73733E8DB21440FD4D23B754A4E0523FBBAC125573A646E34191EE7ACD3B612B87E38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Release/Extensions.txt
- Size 1KB
- SHA256 922a44bd3f11dea60f4e1c80a63021736dc49e933814eff5286ad78c67fd7090
- MD5 2c0113989ea6a02265352c6fe456cab7
- SHA1 fe9837f346965996b20cc880123248b923245fde
- SHA512 5c2650641e3341c429f9f477a57fee31de3f34202a2f36a05fae972cca422619fbfd272e15bb6d12bdfc35d60a044e83700015e9b408409e008c851b1ec2becc
- TLSH
  T12E3144AEC91EC4C59C4E8DE63AC8DC80559775C674CA06D1CB40D23C6BFE1BB02D0A67
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral3 behavioral4
- Target
  Release/Flags/FlagsBase/LOCALIP.png
- Size 1KB
- SHA256 eb4e15071aa1e92d130b1a9d4ed942f73296e129b87975aafe04668eb2bf9ed9
- MD5 89055ae42d7ab4c8533e66ee0b035a7b
- SHA1 637517f9c3ecec5a9867a7f12ffb15ee78e22927
- SHA512 0540306be08bace1be558fed978a4438f74f4f8e5415fef4b57ffa6dea4d6f2d7efbd95a73b17c27540e4dea6930ae86a130e6d331b9ac6869abc0231fc7a7cf
- TLSH
  T14C21D7D685805C773F760BAF90FE3E80A5E28C798E1B6C151F5BD88B26C095036E0B23
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Release/Flags/FlagsBase/NOCONNECTIONORLOCAL.png
- Size 1KB
- SHA256 eb4e15071aa1e92d130b1a9d4ed942f73296e129b87975aafe04668eb2bf9ed9
- MD5 89055ae42d7ab4c8533e66ee0b035a7b
- SHA1 637517f9c3ecec5a9867a7f12ffb15ee78e22927
- SHA512 0540306be08bace1be558fed978a4438f74f4f8e5415fef4b57ffa6dea4d6f2d7efbd95a73b17c27540e4dea6930ae86a130e6d331b9ac6869abc0231fc7a7cf
- TLSH
  T14C21D7D685805C773F760BAF90FE3E80A5E28C798E1B6C151F5BD88B26C095036E0B23
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Release/Flags/FlagsBase/UKN.png
- Size 2KB
- SHA256 ccf97cfd055e8b424f2fa7d3a1de718f1fe2c0ceef22000b92d0a9c5851adf7c
- MD5 9795be7cc2591750ff692f5798979119
- SHA1 0f8a09c71d967e25e66c7ce70a40ac9a793b0df4
- SHA512 9cc34de1d89c916fe7defd243067436257da92e3ebf329ff41bb8dcfa21480e440f3683221825bcd83f9e70d97b39cc266891ead0248cc69c59543a2215863cc
- TLSH
  T156514A16CE915AB6ED4424E6B57327EEC00624328B7B2FB0B0017569905E16CA21D6F7
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Release/Flags/FlagsBase/_ASEAN.png
- Size 1KB
- SHA256 eceba5fdfe1b98e85f6767e28586636f7da047162ba5e6191a51c6b44969a2e8
- MD5 edd1f7f5ac88ee16526d1be7573199ca
- SHA1 a35ecd3617c07014e5c15edf4c222beaa4ef38d4
- SHA512 d39df375eb8b66bb90e96b99f9c75165a9dd6ffe4b40643113ca7b01c8e9f9fbd16c809b2f1014c064e9ae378c68337b33cf976934bcc74984fd760a39b3082f
- TLSH
  T12421F9AD1E322AF8C2BE5F63572E4F10B6A27B9E0F863D9058392CEC5D1300681009F7
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Release/Flags/FlagsBase/_African Union.png
- Size 1KB
- SHA256 e3315c233e63ccb502775078c05b12a6cc09731919089faa0f9ce67975f555df
- MD5 9bafe71137dfbe464edb5ea8f79ae3a6
- SHA1 321b65c1edc4a523ffebbc954fa918dcf55ba7a8
- SHA512 1b007077d275ab35bec4d0bee7c3c5ecf9d538185321f9aae60bea3d3200c9fa235df99e6b31c2aac8908257a660977fedd2113572007c25a9f2605932d61f0e
- TLSH
  T1C831E9C2A6A48C47B89810F19541443E0A7ACD14381F642C698F56A4B7BFE44C9E7AC9
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Release/Flags/FlagsBase/_Alderney.png
- Size 2KB
- SHA256 a648200eb724895de1034ab7a3b82394c391576adcfbc2bd75911b343afe2f26
- MD5 fc4033ebb25958a3bb219e1ba08877e5
- SHA1 d7cc0f80e046ff4bc557004829c5588623bb0950
- SHA512 f8874a0de0da93018e9fc051a2976d88550d59ec3c06c9e162c8c681b09d5a10fd64ae6779b0c21f0025f42294e27a9cc73b993b86287af619e2af9f20ffad14
- TLSH
  T1C941C70DFD61A102C088A7395AE3501799DB8AC0EBCD906DBD8C84175B391F7982FADB
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Release/Flags/FlagsBase/_Arab League.png
- Size 1KB
- SHA256 f093a618390e4ef10ee984262dd3334074536f565eb0ecf6cbd0939597073b3d
- MD5 7fec8a94e0af73b8647803e1ff9887be
- SHA1 aca14e7523e0bff0a9399a0998b49387d636da9e
- SHA512 61d5698ab4bcbf9589338c045a1a214edb887746e9e9a67d434dbc1ee81b3682a7cca8560c79a285dff0fd2d8550305e1d7b8f17fde68c1b9543e788a78379a0
- TLSH
  T1FC3119E713000B75A02B96385A3B08B8244A4C4C0B6AD99B52CFBDAE97563C58191E38
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Release/Flags/FlagsBase/_Basque Country.png
- Size 1KB
- SHA256 383ec5c7d8071f04f19621d6aa0da165131e98644a71de816720fe7ff2b27c58
- MD5 3c9305259da891c8422cc794f54bcd42
- SHA1 4bd52b447fc412d9feb923b7766273d0ee47f00f
- SHA512 a6efdd57de12e40e68341af65e93bb44ee0d58ce10d387da88f0cb84033a035d1ec8b360690b33fd93528ce939af8ec7b55234424bcbb63134d4121338261725
- TLSH
  T1FD214A0DE01EBD1A3D13C5EF3328D38A1EF329804D6A516B0BA3841693EC11230FC022
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Release/Flags/FlagsBase/_CARICOM.png
- Size 1KB
- SHA256 605716d3e006f5c4cbd314380edb12e9499a6d90cae45915ba009dd11762de41
- MD5 bd7b748ceeef02c1ca673fe13cec42f2
- SHA1 8071f846ded952f930384ff7d1d5c1b2107c18c4
- SHA512 82553327422d3ac9a2ad4e61da6699d33343293290d8b92fc631b0e339004b7789aa206c5d53c84dd28a5079703fd6a9228f55dbc422e5c3525c61ee8634ed60
- TLSH
  T1D221E7AA82273C1F8B2B423A04AB049180554D795BE70C686171ECAC74B8CD672992ED
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Release/Flags/FlagsBase/_CIS.png
- Size 1KB
- SHA256 defaacd2744782b629840a415547215d2bc8a9e31284b26e520165d5c1664fcb
- MD5 2fcde0a2f2f19da1f1dc3f3fd6af0bca
- SHA1 36151b35abde6fd05b67039f537cae4135e21e56
- SHA512 06cbfdb082a2e05e952c6d2f6005871e8ac406e2dc26253ae3667eef6b3895e300d1194d0b405521c8e5586737c2a6ea0911120723da371f37339b687afe111e
- TLSH
  T11A31F8EF6291866BD0180F60D68F84A4F025C99B81793A85550FA220227299CD3B12DC
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Release/Flags/FlagsBase/_Catalonia.png
- Size 623B
- SHA256 72e94ff03355fcf32ced8c941915d5f8c236aa6b2960bcbb92adc2dece017ca0
- MD5 2c0e6b7f731cd3b82fc3be6cc0a0b89d
- SHA1 51c1b7b11d94a161dd8fc1e38a4516a6f9521877
- SHA512 772b92cc7094e21114e30ac521487cc314a48707990cd6cecc31a5e6192b4d6b3c1963da460d1e8a49d66627353df439948c013ad8577515fb6acb35df969274
- TLSH
  T10DF002C72D05D926D6E2E2525A04D014BA7F8FFEDB38211C8DC5882B7BE48124FC5946
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Release/Flags/FlagsBase/_Commonwealth.png
- Size 1KB
- SHA256 f0d5ec34b073078f08dba58591942d94d497df089d3edb66e552cf78a303a1e9
- MD5 8bd9f104b13d87168421a9ef50f859b0
- SHA1 aeaf05abf52a1ce45d235db81f0b1af13ad43265
- SHA512 e532b85eba8f2348865bde1c1393a6fe14a8164bc65f6478629d90df2c6547ae43ff4828e20e78d2b4d28b921f8810e3616f4a0ae67b953885b86e3bcb7cf49b
- TLSH
  T1D921D6F5C391A46FEEB23B5121825402391F18B508897D6D1CADA9B13EC9D2BDBCC602
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Release/Flags/FlagsBase/_England.png
- Size 498B
- SHA256 3da187a729c7915e13a6ba973ff368cfebdb81c85c78a4176ba79ae9e8122254
- MD5 ce042e61b8cbdbae2d5e55690bce2b4a
- SHA1 5646ae9842f9889cba41fbe0a051f4a81bb1b5fb
- SHA512 e294f4ab6bb0de01e81ee9c99a35dfc86b758c7780e7a2cb8099ad153cf11c022941243a3a20c4537f9afd4c2666d6bdf74218fa36ef94cffa6caab02aacc0b1
- TLSH
  T1E0F00EF90125245A85870B12CA73CD39A78220B40F3B651D016FEAFA9DB08D9B3A9723
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Release/Flags/FlagsBase/_European Union.png
- Size 1KB
- SHA256 eb4e15071aa1e92d130b1a9d4ed942f73296e129b87975aafe04668eb2bf9ed9
- MD5 89055ae42d7ab4c8533e66ee0b035a7b
- SHA1 637517f9c3ecec5a9867a7f12ffb15ee78e22927
- SHA512 0540306be08bace1be558fed978a4438f74f4f8e5415fef4b57ffa6dea4d6f2d7efbd95a73b17c27540e4dea6930ae86a130e6d331b9ac6869abc0231fc7a7cf
- TLSH
  T14C21D7D685805C773F760BAF90FE3E80A5E28C798E1B6C151F5BD88B26C095036E0B23
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32