General
- Target 2026-09-29_3bad6bf9c17810e14a65276bb0c5916f_conti
- Size 455KB
- Sample260930-dbe4ps1frc
- SHA256 68726de1be2a580368811b5da1c6ff406c4c4ee417453cd2430ad4dc86f41e9c
- MD5 3bad6bf9c17810e14a65276bb0c5916f
- SHA1 f9c625e59a9959fd8018bbe9320ac6a0537314c1
- SHA512 b5c54cabafb8df579dac8262376140779efa5e20a93a232b22be3fa2aaace745389a2de6e80c734cd70c0a57ba619afa95ab0e3a25f6a8d1b065e2cc10837533
- SSDEEP 6144:IE4dlH7lwh9f1fey+A1np34Ggnc5jIah+Bm9HxMPcy7aXaGB3UO1qWr1aAyzbA0E:IEC7g9f1mBq62qzeXrUOUo/kbA0Fm
- TLSH T13FA423579FE98BBEC967A3F472D22835D82239404AF010398A9D81731B855E0DB3F779
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_3bad6bf9c17810e14a65276bb0c5916f_conti.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_3bad6bf9c17810e14a65276bb0c5916f_conti.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_3bad6bf9c17810e14a65276bb0c5916f_conti
- Size 455KB
- SHA256 68726de1be2a580368811b5da1c6ff406c4c4ee417453cd2430ad4dc86f41e9c
- MD5 3bad6bf9c17810e14a65276bb0c5916f
- SHA1 f9c625e59a9959fd8018bbe9320ac6a0537314c1
- SHA512 b5c54cabafb8df579dac8262376140779efa5e20a93a232b22be3fa2aaace745389a2de6e80c734cd70c0a57ba619afa95ab0e3a25f6a8d1b065e2cc10837533
- SSDEEP 6144:IE4dlH7lwh9f1fey+A1np34Ggnc5jIah+Bm9HxMPcy7aXaGB3UO1qWr1aAyzbA0E:IEC7g9f1mBq62qzeXrUOUo/kbA0Fm
- TLSH T13FA423579FE98BBEC967A3F472D22835D82239404AF010398A9D81731B855E0DB3F779
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.