General

  • Target
    Phantom.exe
  • Size 874KB
  • Sample260626-b7bp2shs3p
  • SHA256 6ac4443c76b7be7e48f08b2db7d6debfa19606b1372409f45f442984f108f897
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Phantom.exe
    • Size 874KB
    • SHA256 6ac4443c76b7be7e48f08b2db7d6debfa19606b1372409f45f442984f108f897
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects DonutLoader

    • Family: DonutLoader

      DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.

MITRE ATT&CK Enterprise v16

Tasks