General
- Target shellcode.EXE
- Size 14.8MB
- Sample260723-xj55msvera
- SHA256 ad53a265df699373a2f8cc25ac77840dce5db8a712f6b0ef5df91b8d3bf4b358
- MD5 6318305e1b1dc5acadefa3d69082985f
- SHA1 895eda614784d3db40ff3e954f7eb05e5b9e8524
- SHA512 c301d8f78e57b8235acc68f970c74f6b412dc3a0c7762bf4f1531aa9d924578cd8a3b77c52ac71d17873fab2e06d3cf8c69864873370925c4bbf681382e40e97
- SSDEEP 393216:cWv9NSFtpUI1be32R6mc5t2+V1HSwGNSqUAuhYcv7c:cWv9NSbpUI1a346x5qTSqzurv7
- TLSH T10EF6338AB96D1B20D914F7FB433BAE38BB71AE07535D4B46CA779031A449838533A7D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
shellcode.exe
Resource
win10v2004-20260513-en
10 signatures
300 seconds
Malware Config
Targets
-
- Target shellcode.EXE
- Size 14.8MB
- SHA256 ad53a265df699373a2f8cc25ac77840dce5db8a712f6b0ef5df91b8d3bf4b358
- MD5 6318305e1b1dc5acadefa3d69082985f
- SHA1 895eda614784d3db40ff3e954f7eb05e5b9e8524
- SHA512 c301d8f78e57b8235acc68f970c74f6b412dc3a0c7762bf4f1531aa9d924578cd8a3b77c52ac71d17873fab2e06d3cf8c69864873370925c4bbf681382e40e97
- SSDEEP 393216:cWv9NSFtpUI1be32R6mc5t2+V1HSwGNSqUAuhYcv7c:cWv9NSbpUI1a346x5qTSqzurv7
- TLSH T10EF6338AB96D1B20D914F7FB433BAE38BB71AE07535D4B46CA779031A449838533A7D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.
-
Drops desktop.ini file(s)