Static task
static1
Behavioral task
behavioral1
Sample
d955412496d757de71c2704bdadc39245af8cda5f1ba864dedc7cf528dd0c6b3.exe
Resource
win7v20201028
0 signatures
0 seconds
General
-
Target
d955412496d757de71c2704bdadc39245af8cda5f1ba864dedc7cf528dd0c6b3
-
Size
535KB
-
MD5
4522c3ecca6abca8109b4e7186d5288e
-
SHA1
96593ecfc2f5309ea7dc9eccc8aabe2d65732643
-
SHA256
d955412496d757de71c2704bdadc39245af8cda5f1ba864dedc7cf528dd0c6b3
-
SHA512
8a9a54cf2ffede5f1f510689964374bf420e4932563251fd5f88e8c166fe9de4ece9c624cd99df75762d929bcfe691178e0686ea0871e394023e3e77f8972676
Score
10/10
Malware Config
Signatures
-
Contains code to disable Windows Defender 2 IoCs
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
resource yara_rule sample disable_win_def sample disable_win_def
Files
-
d955412496d757de71c2704bdadc39245af8cda5f1ba864dedc7cf528dd0c6b3.exe windows x86