General
- Target file.exe
- Size 151KB
- Sample261008-2y63psha64
- SHA256 de007a3bc1cfcdf8985690b5127eb099292a3edfd6f4f7b462c65229011a669b
- MD5 abf4a82fc36da0c8918f7e8b7185d97c
- SHA1 f18cee29bcd426cb80a02f0195eaf68f08d8e225
- SHA512 baf9c939868daf970401fab45938bb1dc7fec7642c24387238b8b891ad6e2b2b526b1b980571ea655ab689d87b98b56df17a8cf9b934e67ec3318b8fcf975f57
- SSDEEP 3072:MWlssEIrEwrxwTWxqLflso/Gadg21on+/n:G3yxFsz9dJ
- TLSH T12DE33A5B73A530F9E277923885A61A42F77278310751AFEF0360467A1E633D09E3BB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 151KB
- SHA256 de007a3bc1cfcdf8985690b5127eb099292a3edfd6f4f7b462c65229011a669b
- MD5 abf4a82fc36da0c8918f7e8b7185d97c
- SHA1 f18cee29bcd426cb80a02f0195eaf68f08d8e225
- SHA512 baf9c939868daf970401fab45938bb1dc7fec7642c24387238b8b891ad6e2b2b526b1b980571ea655ab689d87b98b56df17a8cf9b934e67ec3318b8fcf975f57
- SSDEEP 3072:MWlssEIrEwrxwTWxqLflso/Gadg21on+/n:G3yxFsz9dJ
- TLSH T12DE33A5B73A530F9E277923885A61A42F77278310751AFEF0360467A1E633D09E3BB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.