Static task
static1
Behavioral task
behavioral1
Sample
8920c6867df1eeaec33e3e6253524700.exe
Resource
win7
windows7_x64
0 signatures
0 seconds
General
-
Target
8920c6867df1eeaec33e3e6253524700
-
Size
534KB
-
MD5
8920c6867df1eeaec33e3e6253524700
-
SHA1
4ce786281b76b6949166092faa9bfccee4e2c599
-
SHA256
b126d2bf73da9bce2f1a0748febb99510127eee852284a75c777ebac33b39649
-
SHA512
fec621690ca21fc62a46c6b285a0bad0d6f3e4c792997616216b227b5a01db78b1b769c4847f3b6d0bc70d95f12b73885156b3164f319cda5d44b34861ef12e2
Score
10/10
Malware Config
Signatures
-
Contains code to disable Windows Defender 1 IoCs
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
Processes:
resource yara_rule sample disable_win_def
Files
-
8920c6867df1eeaec33e3e6253524700.exe windows x86