General
- Target shell.exe
- Size 8.1MB
- Sample260623-x5akvsfx5m
- SHA256 b8ec0c394632cb62b9f909d7a5a36eaa6eac1000252018ee508109e677f48711
- MD5 fb14f9f70eb196884875af9eeefc9243
- SHA1 bdc1fedab8227576c24408cb64c886103609cceb
- SHA512 f516cbb9b9150a8b705bbc2e242f5a9e4c25cf464e6368327cc73d0d5ed3e4d6b88b6d545fdbe7a4bd46803e1fe1a7a831231c0b0028d2a584d9162d4913997e
- SSDEEP 196608:tqZekMzvUmchVPhgNokud7VeILdCqAdn0HdSaMPaIa:QQUm0hgyd7AUsqgn0HdSaEr
- TLSH T1E48633ADBFC2EF6AC664A1B86D9EC4AFEB49451FF1C152BFCCA13DD82942484D05D012
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
shell.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
shell.exe
Resource
win11ltsc2024-20260618-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target shell.exe
- Size 8.1MB
- SHA256 b8ec0c394632cb62b9f909d7a5a36eaa6eac1000252018ee508109e677f48711
- MD5 fb14f9f70eb196884875af9eeefc9243
- SHA1 bdc1fedab8227576c24408cb64c886103609cceb
- SHA512 f516cbb9b9150a8b705bbc2e242f5a9e4c25cf464e6368327cc73d0d5ed3e4d6b88b6d545fdbe7a4bd46803e1fe1a7a831231c0b0028d2a584d9162d4913997e
- SSDEEP 196608:tqZekMzvUmchVPhgNokud7VeILdCqAdn0HdSaMPaIa:QQUm0hgyd7AUsqgn0HdSaEr
- TLSH T1E48633ADBFC2EF6AC664A1B86D9EC4AFEB49451FF1C152BFCCA13DD82942484D05D012
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.