General

  • Target
    donut_v1.1.zip
  • Size 329KB
  • Sample260908-etb1fa1gkf
  • SHA256 6bb3a6fab8c37f5009c6e32310730650ec422f4386d296772c7780dc6f1609e9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      docs/2019-5-9-Introducing-Donut.md
    • Size 26KB
    • SHA256 97c56e37779c292c748fd8d7d3d5435425917101ce4b2d5b9de75766b85b9fec
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      docs/devnotes.md
    • Size 80KB
    • SHA256 7cd8f0f2a779bd79ff3037f996ce3f7f80f7224e909e30c2d32b940293ad2437
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      donut.exe
    • Size 247KB
    • SHA256 3c6710646d8eb93fc6055378a71a6114518c5f456e634dab028a72a40c3f47aa
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      test/inject.exe
    • Size 151KB
    • SHA256 41b3d773d06b02d661735b90514fd93617342839a2cbb87027977ad77df4f943
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      test/inject_local.exe
    • Size 147KB
    • SHA256 6760e3c163c1ff060607b1a47cae431394e10058573c62d18ab8492781a2c541
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks