● Malware

Donut

Donut is an open source framework used to generate position-independent shellcode. Donut generated code has been used by multiple threat actors to inject and load malicious payloads into memory.

View graph Watch Export

Indicators tracked

Intelligence Reports33

33 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium

Connections

30 relationships

T1027.013: Encrypted/Encoded File

source

T1059.007: JavaScript

source

T1106: Native API

source

T1055: Process Injection

source

T1620: Reflective Code Loading

source

T1059: Command and Scripting Interpreter

source

T1070: Indicator Removal

source

T1057: Process Discovery

source

T1059.001: PowerShell

source

T1685: Disable or Modify Tools

source

T1059.006: Python

source

T1027.002: Software Packing

source

T1071.001: Web Protocols

source

T1059.005: Visual Basic

source

T1105: Ingress Tool Transfer

source

T1027.015: Compression

source