2026-09-24_54da51854e1d8627ec994935396bb208_adload_dosia_glassworm_poet-rat_rekoobe_sliver
- SHA256 924df8bd3817a68139a91a65c32fdc5ecf28626b90e5e5f68804cd035504c8b7
-
Detects DonutLoader
Behavioral task
behavioral1
Sample
2026-09-24_54da51854e1d8627ec994935396bb208_adload_dosia_glassworm_poet-rat_rekoobe_sliver
Resource
macos-20260915-en
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.
| resource | yara_rule |
|---|---|
| sample | family_donutloader |
Detects DonutLoader