utros.bin
- SHA256 adc589eda9f2b95c869770b1fa49bff109b4bac1bce4ae7be90f24abce617a19
-
Detects DonutLoader
Behavioral task
behavioral1
Sample
utros.bin
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
utros.bin
Resource
win11ltsc2024-20260911-en
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.
| resource | yara_rule |
|---|---|
| sample | family_donutloader |
Detects DonutLoader