General
- Target update.exe
- Size 8.4MB
- Sample261101-w15prses6q
- SHA256 32d6d0ab3c2bcd76bc6e194092f9abfac1e9fe57c2565f965efab55aa3f4f5f5
- MD5 eb87292a41aa9d1bd59e477e34b32992
- SHA1 d5cfbce0146921181409a526f0dc602757b1dbd3
- SHA512 1387ce41af1b2afd659fa3fc4639e5a194246da4024ee507cfe4934096b082c2a9a4058ffdab90840ed427a603b71c3b53a9088dc6fbb0192e2a7443a48defa1
- SSDEEP 196608:+lOwy6cyeAbMUKL4lcqi2cL4VGyDqOYYXYpsATBN4UsCv:+lB/hbV/lF2KYptN4UsC
- TLSH T133963377DE34AFD0C476443823A3AB105CF23E5C86505361EA9B7A0A23F2E69625F15F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
update.exe
Resource
win10v2004-20260911-en
4 signatures
900 seconds
Behavioral task
behavioral2
Sample
update.exe
Resource
win11ltsc2024-20260911-en
4 signatures
900 seconds
Malware Config
Targets
-
- Target update.exe
- Size 8.4MB
- SHA256 32d6d0ab3c2bcd76bc6e194092f9abfac1e9fe57c2565f965efab55aa3f4f5f5
- MD5 eb87292a41aa9d1bd59e477e34b32992
- SHA1 d5cfbce0146921181409a526f0dc602757b1dbd3
- SHA512 1387ce41af1b2afd659fa3fc4639e5a194246da4024ee507cfe4934096b082c2a9a4058ffdab90840ed427a603b71c3b53a9088dc6fbb0192e2a7443a48defa1
- SSDEEP 196608:+lOwy6cyeAbMUKL4lcqi2cL4VGyDqOYYXYpsATBN4UsCv:+lB/hbV/lF2KYptN4UsC
- TLSH T133963377DE34AFD0C476443823A3AB105CF23E5C86505361EA9B7A0A23F2E69625F15F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.