General
- Target donut_v1.1.zip
- Size 329KB
- Sample260908-etb1fa1gkf
- SHA256 6bb3a6fab8c37f5009c6e32310730650ec422f4386d296772c7780dc6f1609e9
- MD5 660cebfb19f6e11b701ebd90e3a91014
- SHA1 cf7bed1d772ae2cdc81a6a88b78498df6f94a46a
- SHA512 86ca719b967ad6c704cd6f8463ae98cc0721775459d818aa298424fcd13bf2354784dc703d4d59e326ab281684e2d51ea74eadb0fff242e143b755411f2e3c16
- SSDEEP 6144:1E8/QyYqt0ScjF/sunq64ORkPovbfVhkocVDQvkrxGcAdrd/8:R/1b49q6Rm4Z+ocVJrla8
- TLSH T1326422BCEC1BF4E0D89E93B2041BF1BBA6F5A6AA51D44C9D5D4EC1C5EC21C542232F82
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
docs/2019-5-9-Introducing-Donut.ps1
Resource
win11ltsc2024-20260709-en
15 signatures
900 seconds
Behavioral task
behavioral2
Sample
docs/devnotes.html
Resource
win11ltsc2024-20260709-en
10 signatures
900 seconds
Behavioral task
behavioral3
Sample
donut.exe
Resource
win11ltsc2024-20260709-en
0 signatures
900 seconds
Behavioral task
behavioral4
Sample
test/inject.exe
Resource
win11ltsc2024-20260709-en
0 signatures
900 seconds
Behavioral task
behavioral5
Sample
test/inject_local.exe
Resource
win11ltsc2024-20260709-en
0 signatures
900 seconds
Malware Config
Targets
-
- Target docs/2019-5-9-Introducing-Donut.md
- Size 26KB
- SHA256 97c56e37779c292c748fd8d7d3d5435425917101ce4b2d5b9de75766b85b9fec
- MD5 ab12bfb4680f44f1bb17a6b56fd478d2
- SHA1 998b15857f0f5294df08bfe1a7cd42e8098be76b
- SHA512 343a50f30fdae0fbf214fda1dcd5739b5610d7c7e7f1773acd6b85bbae46edd76d32c947af6223b84551ac3a43546b67ea0c620c008178fc454771aca624b2cd
- SSDEEP 384:CSEWzSw7srmJi4KHv0EiQ+BgT+E9Rt/7Q9VHcOXuMebjDf9VNzdj8e0R4EIS:C0L7sqwiKSE9Rt/89VHcSmflzW+lS
- TLSH T19DC2E91B830993390BF31486B90AA4D6DB2D817D77E109B1786CC13CB3239B5527A6DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target docs/devnotes.md
- Size 80KB
- SHA256 7cd8f0f2a779bd79ff3037f996ce3f7f80f7224e909e30c2d32b940293ad2437
- MD5 8a355d4288b6d2a08ae67380222649b6
- SHA1 0ee0a411771ca8eeea3a78f745b945bb4911cade
- SHA512 0ffa70c97bd6929117ece073393dce7f625edafdbab8745b5c05f2e99c8d4f3142001cbbd742b01bdb6e3b2b0e030136aa540df583919ac9340cdfda6eac492e
- SSDEEP 768:UHSNTJU+Fnlrts3Jah4sr90UIMHXyV5WZmXpqqKoGNScEBcBzZ:UyRCKnl7ZHXyV5WA5qFLxaI
- TLSH T19083ED27C3FE401B463290CEA04BBA57458952D596E10B407AAEF27D3FDC29538636FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target donut.exe
- Size 247KB
- SHA256 3c6710646d8eb93fc6055378a71a6114518c5f456e634dab028a72a40c3f47aa
- MD5 45336a23b777f9bc23781f13ba04d3de
- SHA1 ab1b0046761a8e735cd7871573745333342d40b9
- SHA512 2a34facb93a84a8451754cb73fb5214164f3378f32c5f0a3ed8e1b5eeae7f61b29bd102ba3df3e75052d73b9a49bf6b4d7d0f30f0cf9f2d28f045eae84e715fa
- SSDEEP 6144:vlt6D7xhNh2LeL0AGTaObuzrY6ysBcq8n:P6D7xhNh2a0rVK86JBD
- TLSH T15C448C15B3A510F6E8738234C9119706FEB27C4543A09B8F23A85BB6AF776E06D3D790
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target test/inject.exe
- Size 151KB
- SHA256 41b3d773d06b02d661735b90514fd93617342839a2cbb87027977ad77df4f943
- MD5 dc880bacba2191947aa0ee183990a345
- SHA1 7cc7a04ccacb46e08c437f2f38894c0c0cda485d
- SHA512 a63631d684417009ca44c871d7b5de9ffeb9095e2489da69266a7cca1147eda71246de24a3f548efa00b0e6038f6496cc82ab0d6668726e87d62085ed5babe26
- SSDEEP 3072:IR3vwXygb4m08H6DGKEUMUg9UEB32G/B7ZO:SvwXyAt0s67E8g9UEt/M
- TLSH T154E37D1773A530F9E0779238C8625A46F7B2B83207609B9F03A457761F236D15E3EB62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target test/inject_local.exe
- Size 147KB
- SHA256 6760e3c163c1ff060607b1a47cae431394e10058573c62d18ab8492781a2c541
- MD5 b0cb969cfefec8a503c47924eb9ca03b
- SHA1 2e246a7fc2004dad5dc6aea5aacb0e9a511d1ed6
- SHA512 353f82626a3d983ac55d1339ee32296fbf9ddaf67c7f3c8d4005478bc629e5bebb40f1893acc38fa45b55d8c380de3f1a6f04d6665e6ea24c0d1c600d5156f55
- SSDEEP 3072:1d6HGXeE5EAGZd7t3/DwxcCmvIlbRCfs05RB:uGXeaEAGZdVL7Cmv+VCR
- TLSH T114E36B5773A530F9E1778278C8915A46F7B2B83207209B9F03A447762F236D19E3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10