General
- Target Phantom.exe
- Size 874KB
- Sample260626-b7bp2shs3p
- SHA256 6ac4443c76b7be7e48f08b2db7d6debfa19606b1372409f45f442984f108f897
- MD5 aa9a39655342fb15cc71ffa876285dce
- SHA1 591608894b074d4407a14e87f1e1ef3b6d21684c
- SHA512 cd5cd171966ebfb97dc065d147a6db23d1be27e8b00c725a9f4ae4f221351292e0d5ee1772c1edc420df7a12ab512772783ab4a7d7f7b75b057d6aa68a4ebc48
- SSDEEP 12288:EnrFirKl8o5gaY4QO+hqnBkw6LE2FdWaGNGGLUWl6JB+A9+rN6FAZXhqDnxlrugX:IIKv0vJMBkOAWArwXZ6FPxk
- TLSH T14D159D06769043A6D4B65234C963C221EB767C1247209B4F37DC6AAB6F337909E3DB63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
Phantom.exe
Resource
win11ltsc2024-20260618-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Phantom.exe
- Size 874KB
- SHA256 6ac4443c76b7be7e48f08b2db7d6debfa19606b1372409f45f442984f108f897
- MD5 aa9a39655342fb15cc71ffa876285dce
- SHA1 591608894b074d4407a14e87f1e1ef3b6d21684c
- SHA512 cd5cd171966ebfb97dc065d147a6db23d1be27e8b00c725a9f4ae4f221351292e0d5ee1772c1edc420df7a12ab512772783ab4a7d7f7b75b057d6aa68a4ebc48
- SSDEEP 12288:EnrFirKl8o5gaY4QO+hqnBkw6LE2FdWaGNGGLUWl6JB+A9+rN6FAZXhqDnxlrugX:IIKv0vJMBkOAWArwXZ6FPxk
- TLSH T14D159D06769043A6D4B65234C963C221EB767C1247209B4F37DC6AAB6F337909E3DB63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.