General
- Target file.exe
- Size 151KB
- Sample261002-2vk13avcnd
- SHA256 049b268f6fe7dee81651ff0d3ddc72b205f465c9aba3e57e9222fe9c5eadff88
- MD5 14e73b958f688f529144dbd881608f72
- SHA1 f14b16929621b537dba11a79ecfe8bc2544b42b1
- SHA512 a6db0681e7c29e13d99d307e9dc20cc6d7ebe9a63b4ec7f93633b6000f3c001b9ba66f6786af167e0813ae5f42bbaca48455851226da188171d4667c86fe20e4
- SSDEEP 3072:G3vFnk/Z2riGlYup6WUo1QMe42KgW1oH/Lbw:G3v6yR6WE4tqo
- TLSH T160E33A4B73A530F9E267D23885A21642F77278311B619BDF03A0477A1E233D59E3BB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 151KB
- SHA256 049b268f6fe7dee81651ff0d3ddc72b205f465c9aba3e57e9222fe9c5eadff88
- MD5 14e73b958f688f529144dbd881608f72
- SHA1 f14b16929621b537dba11a79ecfe8bc2544b42b1
- SHA512 a6db0681e7c29e13d99d307e9dc20cc6d7ebe9a63b4ec7f93633b6000f3c001b9ba66f6786af167e0813ae5f42bbaca48455851226da188171d4667c86fe20e4
- SSDEEP 3072:G3vFnk/Z2riGlYup6WUo1QMe42KgW1oH/Lbw:G3v6yR6WE4tqo
- TLSH T160E33A4B73A530F9E267D23885A21642F77278311B619BDF03A0477A1E233D59E3BB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.