Tool
pe2shc
- First Reported
- Jun 16, 2026
- Latest Reported
- Jun 16, 2026
Reported Context (1)
- In memory execution: Donut and pe2shc style loaders map and run code directly in memory rather than dropping a clean executable to disk. BabaDeda Loader Uses ClickFix and Multi-Stage In-Memory Execution to Deliver Malware
Malware (3)
People (1)
MITRE ATT&CK (10)
Vendors (1)
Products (2)
Tools (2)
Industries (2)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.