General
- Target d359042f548d19e84a44732c9f43fcd9e208128235b33226ed3e3cbc376dae4b
- Size 7.4MB
- Sample260714-nat7cabt3j
- SHA256 d359042f548d19e84a44732c9f43fcd9e208128235b33226ed3e3cbc376dae4b
- MD5 8b92fa033eb3bc287f9fb28ea0682feb
- SHA1 25f6c689b517609f09bf435ee1b9640d025368e5
- SHA512 5c0b7c8677ccd366409e37472437ccfe55c738554c1805304b66f1a41169a71356371ca90fdfa8c26352fb2b41c3098a14b18f925ccc66b83d0e5a39740c9cbd
- SSDEEP 98304:TjVhsPmwAHbVAub2sGzzHnTNXjbjUJvpAVx02+3v6jBNkYxpkZFBEXK:/jsPmtHGzzRupUx02Lrb7kZ3EXK
- TLSH T1AF768D03F29580ECC08DD1B8C70A9677E622B8994734B99F2B945F522FB7B605F9E314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d359042f548d19e84a44732c9f43fcd9e208128235b33226ed3e3cbc376dae4b.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
d359042f548d19e84a44732c9f43fcd9e208128235b33226ed3e3cbc376dae4b.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target d359042f548d19e84a44732c9f43fcd9e208128235b33226ed3e3cbc376dae4b
- Size 7.4MB
- SHA256 d359042f548d19e84a44732c9f43fcd9e208128235b33226ed3e3cbc376dae4b
- MD5 8b92fa033eb3bc287f9fb28ea0682feb
- SHA1 25f6c689b517609f09bf435ee1b9640d025368e5
- SHA512 5c0b7c8677ccd366409e37472437ccfe55c738554c1805304b66f1a41169a71356371ca90fdfa8c26352fb2b41c3098a14b18f925ccc66b83d0e5a39740c9cbd
- SSDEEP 98304:TjVhsPmwAHbVAub2sGzzHnTNXjbjUJvpAVx02+3v6jBNkYxpkZFBEXK:/jsPmtHGzzRupUx02Lrb7kZ3EXK
- TLSH T1AF768D03F29580ECC08DD1B8C70A9677E622B8994734B99F2B945F522FB7B605F9E314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.
-
Family: slive
-
Sliver 32-bit implant (with and without --debug flag at compile)
slive 32bit malware detected.
-
Sliver Custom Detection
slive malware detected.