7-Venom[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
7-Venom.exe
Size 625KB
Sample200815-gd986etyce
SHA256 5e74c2b7ac2d1ad593abac2e47d690a083bf96f1566901e58a5f59d221bc9853
MD5 8e0459ea44e2e136a66683b4bb1b9c66
SHA1 e675cd144db3f6adeef99c1d790caae6df4d2b49
SHA512 257f134d34a6016295e2807e1ff94afb84e25897ae5dd346a8c17e5e28e9dbc130055d22adadfd1f31776d4d62c055d204f3f1293df9c58da2daa9244e2f5059
MD5 SHA1 SHA512

Score

10^/10

Malware Config

Signatures

Contains code to disable Windows Defender 1 IoCs

A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

resource	yara_rule
sample	disable_win_def

File Explorer

7-Venom.exe

.exe 625KB

7-Venom.exe

SHA256 5e74c2b7ac2d1ad593abac2e47d690a083bf96f1566901e58a5f59d221bc9853
MD5 8e0459ea44e2e136a66683b4bb1b9c66
SHA1 e675cd144db3f6adeef99c1d790caae6df4d2b49
SHA512 257f134d34a6016295e2807e1ff94afb84e25897ae5dd346a8c17e5e28e9dbc130055d22adadfd1f31776d4d62c055d204f3f1293df9c58da2daa9244e2f5059
MD5 SHA1 SHA512

windows x86

Contains code to disable Windows Defender

A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.