General
- Target e13d7b87184371006f337cf3025e0960a8060ab22c8920c34d15329dbb03bcd0.zip
- Size 42KB
- Sample260913-cskvvazerg
- SHA256 4653da1b6e194eeb2e9ea73ca81593838485501c9404a61fe4ac90c04936389f
Score
10/10
Malware Config
Targets
-
- Target e13d7b87184371006f337cf3025e0960a8060ab22c8920c34d15329dbb03bcd0.exe
- Size 96KB
- SHA256 e13d7b87184371006f337cf3025e0960a8060ab22c8920c34d15329dbb03bcd0
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.
-
Unknown use of msiexec with remote resource
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.