General
- Target 092efbe07f739c831b8811c95bd4a506.exe
- Size 993KB
- Sample260822-mf5platbje
- SHA256 cec1219e3640202c54a484ed3b88dd56fd26edfdb533c5eba8b2416e17ea6334
- MD5 092efbe07f739c831b8811c95bd4a506
- SHA1 e5a5ba8d8c6b47ad5614d0d879c946ff7b842191
- SHA512 99a424210547a955321338bf1249a022c878af167ef45f2f7003e98a02a87ba0106192a8e22d06f2f04cec294b7719a0dc65898515bca75271b76a169c3039bd
- SSDEEP 24576:n1m3JDwManA0d9ccccccccccccccccccccccccccccccccccccccccccccccccc6:n1m32Ma/100l0uSC
- TLSH T10A25C076A1A691BCD3C6C03893588E33E733B4860E557DB612CCE5F82DA6790E728F51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
092efbe07f739c831b8811c95bd4a506.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
092efbe07f739c831b8811c95bd4a506.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 092efbe07f739c831b8811c95bd4a506.exe
- Size 993KB
- SHA256 cec1219e3640202c54a484ed3b88dd56fd26edfdb533c5eba8b2416e17ea6334
- MD5 092efbe07f739c831b8811c95bd4a506
- SHA1 e5a5ba8d8c6b47ad5614d0d879c946ff7b842191
- SHA512 99a424210547a955321338bf1249a022c878af167ef45f2f7003e98a02a87ba0106192a8e22d06f2f04cec294b7719a0dc65898515bca75271b76a169c3039bd
- SSDEEP 24576:n1m3JDwManA0d9ccccccccccccccccccccccccccccccccccccccccccccccccc6:n1m32Ma/100l0uSC
- TLSH T10A25C076A1A691BCD3C6C03893588E33E733B4860E557DB612CCE5F82DA6790E728F51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.
-
Executes dropped EXE
-
Adds Run key to start application