Static task
static1
Behavioral task
behavioral1
Sample
32bcf0951b1cbe7e95d31e81b450aaf2ab3eb24374eda37266490ed61eb3aa0d.exe
Resource
win7
Behavioral task
behavioral2
Sample
32bcf0951b1cbe7e95d31e81b450aaf2ab3eb24374eda37266490ed61eb3aa0d.exe
Resource
win10
General
-
Target
32bcf0951b1cbe7e95d31e81b450aaf2ab3eb24374eda37266490ed61eb3aa0d
-
Size
32KB
-
MD5
948dc49c28886bc4a371176123724bb1
-
SHA1
17d969deecbef6a54cfb7b1b39c0d3edc5ec0c58
-
SHA256
32bcf0951b1cbe7e95d31e81b450aaf2ab3eb24374eda37266490ed61eb3aa0d
-
SHA512
5e43aad77b073f3eb9e1833b4633475643705d67da2c752f713d4f22441c1dbacae979e27637ec5292434ba2089d0ae6f4ea472aca9ea90cf136be84e92621ca
Malware Config
Signatures
-
Contains code to disable Windows Defender 1 IoCs
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
resource yara_rule sample disable_win_def
Files
-
32bcf0951b1cbe7e95d31e81b450aaf2ab3eb24374eda37266490ed61eb3aa0d.exe windows x86