SHA1 hash of the ValleyRAT payload sample encrypted with RC4; generated using Donut; confirmed as ValleyRAT through decryption with key 'zenzensu' and comparison with known samples