General
- Target xenoded.exe
- Size 80.0MB
- Sample261110-s8a9cavxd1
- SHA256 a7e9073f2d141ac9e40f6728a544776b766f51e8a4830cf54c086cb1abf87668
- MD5 8361f6b69e38818bf01eb113f5c4906e
- SHA1 c5870284cb9b2f7730145c40cf529fc76f4603e3
- SHA512 a79bf67b228eca229575305450c4272f66cbca0c9682e510d2c31f0136b0e17d32b5b54a234c512ca1d048fa662922bb311479045325db84c136c47af3048aef
- SSDEEP 196608:Pnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnng:I
- TLSH T1840801718A4B3A3BC65A1EBF8C44B79924A68E5D8DE4C0B41C39D17A7CB8DF19D34423
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
xenoded.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
xenoded.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target xenoded.exe
- Size 80.0MB
- SHA256 a7e9073f2d141ac9e40f6728a544776b766f51e8a4830cf54c086cb1abf87668
- MD5 8361f6b69e38818bf01eb113f5c4906e
- SHA1 c5870284cb9b2f7730145c40cf529fc76f4603e3
- SHA512 a79bf67b228eca229575305450c4272f66cbca0c9682e510d2c31f0136b0e17d32b5b54a234c512ca1d048fa662922bb311479045325db84c136c47af3048aef
- SSDEEP 196608:Pnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnng:I
- TLSH T1840801718A4B3A3BC65A1EBF8C44B79924A68E5D8DE4C0B41C39D17A7CB8DF19D34423
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects DonutLoader
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.