Benign Download

shellcode.py

Calls base64.b64encode (Python)Executes command via os.popen

SHA-256c3217cb8122d33d348a24d726efad5becd2c3f9939ed2e04d09f61cb4c0be7e8

Evidence

Imports Python base64 module lines 1–4

1import os
2import donut
3import base64
4import tempfile

File opened for binary read lines 14–15

14    with open(file, "rb") as file:
15        dll_data = file.read()

Executes command via os.popen lines 79–81

      # execute the command to build the shellcode
      cmd = f"{donut} {file} {cmdline} -o {temp.name}"
      cmd_out = os.popen(cmd).read()

Calls base64.b64encode (Python) lines 89–91

      with open(temp.name, "rb") as file:
          data = file.read()
          return base64.b64encode(data).decode()