General
- Target mimares.exe
- Size 13.2MB
- Sample260816-wy8nmsgk5v
- SHA256 f7b190df7f7c0b083e8601c25ae25fba72caa9c2d164237a5e86a5128500c93e
- MD5 89ae089febe9044cc867f277fe3fc42c
- SHA1 6094e471bef71c12f5d4e02b68754a5643022398
- SHA512 8eb2a57aa4b6db84ee598ed1d54eb798846a49e743f1866613fe7a61519daf34fd8eb2c474b2eedc3732234dd9858d61f281ab10b3624f7b2f5ed414dbab3e2d
- SSDEEP 393216:RN8ZDppg7iSVYsThiAA+8HFDyr0ZEEAP5dMpo:r8xrWx1A+mhq09A+p
- TLSH T199D6330ECDAACFD6CF86D934442B5840B57518CE2710DBCB476AA472BD0B7C59EE7828
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
mimares.exe
Resource
win10ltsc2021-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target mimares.exe
- Size 13.2MB
- SHA256 f7b190df7f7c0b083e8601c25ae25fba72caa9c2d164237a5e86a5128500c93e
- MD5 89ae089febe9044cc867f277fe3fc42c
- SHA1 6094e471bef71c12f5d4e02b68754a5643022398
- SHA512 8eb2a57aa4b6db84ee598ed1d54eb798846a49e743f1866613fe7a61519daf34fd8eb2c474b2eedc3732234dd9858d61f281ab10b3624f7b2f5ed414dbab3e2d
- SSDEEP 393216:RN8ZDppg7iSVYsThiAA+8HFDyr0ZEEAP5dMpo:r8xrWx1A+mhq09A+p
- TLSH T199D6330ECDAACFD6CF86D934442B5840B57518CE2710DBCB476AA472BD0B7C59EE7828
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.