Classification: Malicious
718264c.exe is a trojan (Windows executable, 338.4 KB). Detected by 44 antivirus engines. Linked to Donut malware.
Detection summary
- 44 antivirus detections
- 1 IDS alerts
- 1 processes observed
- 1 contacted hosts
- 2 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Donut |
Cyber Threat Alliance |
2026-10-15 15:32:27 |
2026-10-15 15:32:27 |
malicious-activity
|
S0695 Donut
|
| Generic Malware |
Hybrid-Analysis |
2025-02-13 02:15:04 |
2025-02-13 03:45:15 |
|
|
| LummaStealer |
MalwareBazaar Abuse.ch |
2025-02-13 02:01:17 |
2025-02-13 02:01:17 |
malicious-activity
|
|
Sample information
- Filenames
- 718264c.exe
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows
- Size
- 346548 bytes
- MD5
a11417c31ad7576e2840e5bccca98994- SHA-1
c202782dab953b624718837d225c0ac1db08e2c8- SHA-256
e9b865aec89db24324980453901c8315763d6eea99a7d5e1ca0992a87f8a83e4- First indexed
- 2025-02-13 02:01:47
- Last updated
- 2025-02-13 04:02:51
Antivirus detections
| Engine | Detection |
|---|
| ALYac | Generic.ShellCode.Donut.Marte.4.78C08F27 |
| APEX | Malicious |
| AVG | Win32:Donut-A [Inj] |
| AhnLab-V3 | Trojan/Win.Generic.R691823 |
| Antiy-AVL | Trojan[PSW]/Win32.Lumma |
| Arcabit | Generic.ShellCode.Donut.Marte.4.78C08F27 |
| Avast | Win32:Donut-A [Inj] |
| Avira | TR/Crypt.XPACK.Gen |
| BitDefender | Generic.ShellCode.Donut.Marte.4.78C08F27 |
| Bkav | W32.AIDetectMalware |
| CTX | exe.unknown.donut |
| ClamAV | Win.Packed.Rozena-10029918-0 |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DrWeb | Trojan.PWS.Lumma.1819 |
| ESET-NOD32 | a variant of Win32/Spy.LummaStealer.S |
| Elastic | Windows.Trojan.Donutloader |
| Emsisoft | Generic.ShellCode.Donut.Marte.4.78C08F27 (B) |
| F-Secure | Trojan.TR/Crypt.XPACK.Gen |
| FireEye | Generic.mg.a11417c31ad7576e |
| Fortinet | W32/LummaStealer.I!tr |
| GData | Win32.Trojan.PSE.15BKZS7 |
| Google | Detected |
| Ikarus | Trojan-Spy.Win32.LummaStealer |
| K7AntiVirus | Trojan ( 005c04fe1 ) |
| K7GW | Trojan ( 005c04fe1 ) |
| Kaspersky | HEUR:Trojan.Win64.Donut.a |
| Malwarebytes | Generic.Malware.AI.DDS |
| McAfeeD | Real Protect-LS!A11417C31AD7 |
| MicroWorld-eScan | Generic.ShellCode.Donut.Marte.4.78C08F27 |
| Microsoft | Program:Win32/Wacapew.C!ml |
| NANO-Antivirus | Virus.Win32.Gen.ccmw |
| Panda | Trj/Genetic.gen |
| Rising | Trojan.DonutLoader!1.E39F (CLASSIC) |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.Generic.fh |
| Symantec | ML.Attribute.HighConfidence |
| Tencent | Malware.Win32.Gencirc.10c0db3e |
| Trapmine | malicious.high.ml.score |
| VBA32 | BScope.TrojanPSW.Lumma |
| VIPRE | Generic.ShellCode.Donut.Marte.4.78C08F27 |
| VirIT | Trojan.Win32.GenusT.EOTQ |
| huorong | HEUR:TrojanSpy/LummaStealer.f |
Process list
| Name | Command line |
|---|
| 718264c.exe | |