General
- Target 142bd0b9734c254ed35939a6b541f24bc2e8ced60db50fc0d4d31c009213e009.exe
- Size 472KB
- Sample260910-hv25ssswdv
- SHA256 142bd0b9734c254ed35939a6b541f24bc2e8ced60db50fc0d4d31c009213e009
- MD5 a9c2f8dbed7199870da0f2013e1bdae2
- SHA1 47723eb7f49fa1eaeba8639b25db2a00777abbe7
- SHA512 292231fc168e0528982940104db998a5d8414d02b96ee7cf2a48cf71dd7d35600ff08f3b45fc41fbcf93b155f30016d8ba91c9bac3551a4677a8c6d11a6bf0b4
- SSDEEP 12288:ORsUmnfm6C893gUY3VN4CJqy738hrB0woiK7fdS:ORsUB89QUYFNpqmir3+7dS
- TLSH T130A423240E8E0EB9D64E537B6D772064ACF98D440C34EAB9DA81F49F3A23367031697D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
142bd0b9734c254ed35939a6b541f24bc2e8ced60db50fc0d4d31c009213e009.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
142bd0b9734c254ed35939a6b541f24bc2e8ced60db50fc0d4d31c009213e009.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 142bd0b9734c254ed35939a6b541f24bc2e8ced60db50fc0d4d31c009213e009.exe
- Size 472KB
- SHA256 142bd0b9734c254ed35939a6b541f24bc2e8ced60db50fc0d4d31c009213e009
- MD5 a9c2f8dbed7199870da0f2013e1bdae2
- SHA1 47723eb7f49fa1eaeba8639b25db2a00777abbe7
- SHA512 292231fc168e0528982940104db998a5d8414d02b96ee7cf2a48cf71dd7d35600ff08f3b45fc41fbcf93b155f30016d8ba91c9bac3551a4677a8c6d11a6bf0b4
- SSDEEP 12288:ORsUmnfm6C893gUY3VN4CJqy738hrB0woiK7fdS:ORsUB89QUYFNpqmir3+7dS
- TLSH T130A423240E8E0EB9D64E537B6D772064ACF98D440C34EAB9DA81F49F3A23367031697D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.
-
Formbook payload
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.