Static task
static1
Behavioral task
behavioral1
Sample
2e1eda10e2bbd19418706a23888807e50c0407eb191cc26d541c85279193c3db.exe
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
General
-
Target
2e1eda10e2bbd19418706a23888807e50c0407eb191cc26d541c85279193c3db
-
Size
534KB
-
MD5
6dd0ae060555eb6cfcdd12126844c9fc
-
SHA1
bdbe2c4d13dbade96f4ffe758588635fabed07bf
-
SHA256
2e1eda10e2bbd19418706a23888807e50c0407eb191cc26d541c85279193c3db
-
SHA512
af273417dcdc164d2f00ac1ea31487f8baa35fbfa43af576eef97516cce37b5d954be9f40054b7a682cd542182757a436235dd0c0082317b54f2af3cf54298b6
Score
10/10
Malware Config
Signatures
-
Contains code to disable Windows Defender 1 IoCs
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
Processes:
resource yara_rule sample disable_win_def
Files
-
2e1eda10e2bbd19418706a23888807e50c0407eb191cc26d541c85279193c3db.exe windows x86