MalwareBazaar Database
This page shows some basic information the YARA rule SilentNet_Donut_UUIDBin_Stage including corresponding malware samples.
Database Entry
| YARA Rule: | SilentNet_Donut_UUIDBin_Stage |
|---|---|
| Author: | GhostTypes |
| Description: | SilentNet donut-fleet/kpool loaders: UUID-named .bin encrypted stage at jar root (sha256-class oracle table in donut builds) |
| Firstseen: | 2026-10-29 20:14:34 UTC |
| Lastseen: | 2026-11-02 18:23:12 UTC |
| Sightings: | 10 |
Malware Samples
The table below shows all malware samples that matching this particular YARA rule (max 1000).
| Firstseen (UTC) | SHA256 hash | Tags | Signature | Reporter |
|---|