General

  • Target
    https://www.testmyspeed.com/
  • Sample260818-rk413shf68

Malware Config

Targets

    • Target
      https://www.testmyspeed.com/
    • Detects DonutLoader

    • Family: DonutLoader

      DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious clipboard content.

      A suspicious script was copied to clipboard.

    • Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks