MalwareBazaar Database
This page shows some basic information the YARA rule SilentNet_Donut_Hub_LoaderFleet including corresponding malware samples.
Database Entry
| YARA Rule: | SilentNet_Donut_Hub_LoaderFleet |
|---|---|
| Author: | GhostTypes |
| Description: | donut kit 2026-10 polymorphic generation: single-letter root loader classes (a-h, the indy-hub table + CJK pool carriers) - catches hub builds even if the UUID .bin stage is renamed away |
| Firstseen: | 2026-10-22 14:59:02 UTC |
| Lastseen: | 2026-11-02 18:23:12 UTC |
| Sightings: | 11 |
Malware Samples
The table below shows all malware samples that matching this particular YARA rule (max 1000).
| Firstseen (UTC) | SHA256 hash | Tags | Signature | Reporter |
|---|