General
- Target 619b81bc9f08865eaaab5f54616823a00dce9fd115924cf185cc6d6c3255c170
- Size 13.1MB
- Sample261102-jrncxaee39
- SHA256 619b81bc9f08865eaaab5f54616823a00dce9fd115924cf185cc6d6c3255c170
Score
10/10
Malware Config
Targets
-
- Target kvpins64.exe
- Size 353KB
- SHA256 5b4c1dc1d629341286cefa03133aaf2a041ee24aa022f7cd845924f210f1ce6d
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
- Target kvpvbsext64.dll
- Size 12.8MB
- SHA256 e28a6f4d8a08c79cb8d198263e819dc339634da08faf8b97d162d95d34cb3f42
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Executes dropped EXE
-
- Target kvpvbsext64_orig.dll
- Size 172KB
- SHA256 77e95ee19a449079ea45db6d93ac8395835affff906334f0344210f695d77bdc
Score1/10