Detects DonutLoader

Family: DonutLoader

DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.

Badlisted process makes network request

Network request originating from process or tool commonly abused by malware.

Downloads MZ/PE file