General
- Target Tqhcyvglc.exe
- Size 713KB
- Sample260713-vwqvdaew51
- SHA256 4162488df37ac5ae9d1048519ed5672dc86d3c4d8726844a8a50c34e95dc640f
- MD5 fbd90d83984b8b9e7b6b53adc51b2e29
- SHA1 25a22b2355355a3bcacc9d08a34a8312e5c7aced
- SHA512 acaab4386402750de70196dc31abf8fcb12c4a7414fde76057d462d176a3e835aabc3b096008d9898c3bca900141050abe8d9ce8fa33bec8df6879870ff29c97
- SSDEEP 6144:KGVypuaQvzh7GXDKUlVoge2f5MGeRVlfALlOV6XBTAIe6BoPT9253ccBQTNKzhnC:UmSog7empcW6QBQKhnVLeMmSd+0qB
- TLSH T197F4BE582859B49FF34160BE08D03EB29944F928F1E45BB1CE770760A6C95EECB9E707
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Tqhcyvglc.exe
Resource
win10v2004-20260513-en
3 signatures
30 seconds
Behavioral task
behavioral2
Sample
Tqhcyvglc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
30 seconds
Malware Config
Targets
-
- Target Tqhcyvglc.exe
- Size 713KB
- SHA256 4162488df37ac5ae9d1048519ed5672dc86d3c4d8726844a8a50c34e95dc640f
- MD5 fbd90d83984b8b9e7b6b53adc51b2e29
- SHA1 25a22b2355355a3bcacc9d08a34a8312e5c7aced
- SHA512 acaab4386402750de70196dc31abf8fcb12c4a7414fde76057d462d176a3e835aabc3b096008d9898c3bca900141050abe8d9ce8fa33bec8df6879870ff29c97
- SSDEEP 6144:KGVypuaQvzh7GXDKUlVoge2f5MGeRVlfALlOV6XBTAIe6BoPT9253ccBQTNKzhnC:UmSog7empcW6QBQKhnVLeMmSd+0qB
- TLSH T197F4BE582859B49FF34160BE08D03EB29944F928F1E45BB1CE770760A6C95EECB9E707
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects DonutLoader
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.