Static task
static1
Behavioral task
behavioral1
Sample
73b5932f1556db5d2532888b72127b3c707315f0785edd14fd6bb519c8e55064.exe
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
General
-
Target
73b5932f1556db5d2532888b72127b3c707315f0785edd14fd6bb519c8e55064
-
Size
534KB
-
MD5
2e89910089adeb48e11a364e3a0dfcfc
-
SHA1
66763d2d596468f40728731b1f9ab072d573a275
-
SHA256
73b5932f1556db5d2532888b72127b3c707315f0785edd14fd6bb519c8e55064
-
SHA512
8aa3c9cae7db6f1f3dc688f011eb85cfbbaf250f36e38ffcd84408ffa35b1f0700fe64991ac39b67ead97edf595fd632232944b28ae29cacd2aef176397d8278
Score
10/10
Malware Config
Signatures
-
Contains code to disable Windows Defender 2 IoCs
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
Processes:
resource yara_rule sample disable_win_def sample disable_win_def
Files
-
73b5932f1556db5d2532888b72127b3c707315f0785edd14fd6bb519c8e55064.exe windows x86