General

  • Target
    https://tria.ge/260618-w151jacw8x
  • Sample260625-c685lagz5v

Malware Config

Targets

    • Target
      https://tria.ge/260618-w151jacw8x
    • Detects DonutLoader

    • Family: DonutLoader

      DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Downloads MZ/PE file

MITRE ATT&CK Enterprise v16

Tasks