General
- Target MwareReverseTCP5.exe
- Size 37KB
- Sample260624-mtfydsbv4x
- SHA256 2b0a892133f698b4b04dbf49cdff3fc92c4b500795a872614beb5d6c70e763fa
- MD5 80547a700aef457689fde08ea7331fa3
- SHA1 8ba7eb04d48b4c38ef2afb3e657a1f38b36b236a
- SHA512 0ec47876ecfe1daa4e55fd67f41697518da1c18c2993672d4c917a8d3dc2ae74d063ba43f579e6e7fdd23ba2cae921ee5284727661066b649f8c49fa07818714
- SSDEEP 768:lrpwYyvesoWEdiYCzhMQgrzCK8qMTMSa1l6q/i/u+81vppp:rwYyfoWHzhMQgXf8TTa1EYDv9
- TLSH T1F803E1B68587B5BDC863BDF70B4D212CB751A812A2141F7B65E4C2B7CCC20C14DABB5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
MwareReverseTCP5.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
MwareReverseTCP5.exe
Resource
win11ltsc2024-20260618-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target MwareReverseTCP5.exe
- Size 37KB
- SHA256 2b0a892133f698b4b04dbf49cdff3fc92c4b500795a872614beb5d6c70e763fa
- MD5 80547a700aef457689fde08ea7331fa3
- SHA1 8ba7eb04d48b4c38ef2afb3e657a1f38b36b236a
- SHA512 0ec47876ecfe1daa4e55fd67f41697518da1c18c2993672d4c917a8d3dc2ae74d063ba43f579e6e7fdd23ba2cae921ee5284727661066b649f8c49fa07818714
- SSDEEP 768:lrpwYyvesoWEdiYCzhMQgrzCK8qMTMSa1l6q/i/u+81vppp:rwYyfoWHzhMQgXf8TTa1EYDv9
- TLSH T1F803E1B68587B5BDC863BDF70B4D212CB751A812A2141F7B65E4C2B7CCC20C14DABB5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.