Detects DonutLoader

Family: DonutLoader

DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.

Badlisted process makes network request

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: PowerShell

Using powershell.exe command.

Command and Scripting Interpreter: PowerShell

Using powershell.exe command.