General

  • Target
    092efbe07f739c831b8811c95bd4a506.exe
  • Size 993KB
  • Sample260822-mf5platbje
  • SHA256 cec1219e3640202c54a484ed3b88dd56fd26edfdb533c5eba8b2416e17ea6334
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      092efbe07f739c831b8811c95bd4a506.exe
    • Size 993KB
    • SHA256 cec1219e3640202c54a484ed3b88dd56fd26edfdb533c5eba8b2416e17ea6334
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects DonutLoader

    • Family: DonutLoader

      DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v16

Tasks