39cb36fcd31d2322d55ea0c4bd3261fda84b765ed9063920ec2631d481b92468 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
39cb36fcd31d2322d55ea0c4bd3261fda84b765ed9063920ec2631d481b92468
Size 28KB
Sample200709-mh4jdd2gb2
SHA256 39cb36fcd31d2322d55ea0c4bd3261fda84b765ed9063920ec2631d481b92468
MD5 d79868aba4eaa4ff394bb07ec2785d10
SHA1 4061cceb7ce3df2b38437a82815b86cdace2da8a
SHA512 e65910ae20b8deee78844e9e1b15733273f709c4c5a9112197692935cbbb84365a29ed7b5fbc7d4c615b0c5dc47c9d797780ad398fba6224d4351a18bcda6bf3
MD5 SHA1 SHA512

Score

10^/10

Malware Config

Signatures

Contains code to disable Windows Defender 1 IoCs

A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

resource	yara_rule
sample	disable_win_def

File Explorer

39cb36fcd31d2322d55ea0c4bd3261fda84b765ed9063920ec2631d481b92468

.exe 28KB

39cb36fcd31d2322d55ea0c4bd3261fda84b765ed9063920ec2631d481b92468

SHA256 39cb36fcd31d2322d55ea0c4bd3261fda84b765ed9063920ec2631d481b92468
MD5 d79868aba4eaa4ff394bb07ec2785d10
SHA1 4061cceb7ce3df2b38437a82815b86cdace2da8a
SHA512 e65910ae20b8deee78844e9e1b15733273f709c4c5a9112197692935cbbb84365a29ed7b5fbc7d4c615b0c5dc47c9d797780ad398fba6224d4351a18bcda6bf3
MD5 SHA1 SHA512

windows x86

Contains code to disable Windows Defender

A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.