Contains code to disable Windows Defender

A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

SamoRAT

SamoRAT is a .NET malware used to receive and execute different commands on the infected system.

ServiceHost packer

Detects ServiceHost packer used for .NET malware

Executes dropped EXE