General
- Target Manikaran Payment 05112025.jpeg.vbs
- Size 644KB
- Sample251108-vansws1ram
- SHA256 eb92fd512aced6503edbe52a19c8b5d225e18fa65a079e250c8ddb90f387c4d4
Score
10/10
Malware Config
Targets
-
- Target Manikaran Payment 05112025.jpeg.vbs
- Size 644KB
- SHA256 eb92fd512aced6503edbe52a19c8b5d225e18fa65a079e250c8ddb90f387c4d4
Score10/10Detects DonutLoader
DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.
Donutloader family
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.