General
- Target ad672b57e920a9dcd84f75423a250a00165b6555b4524c40475a5a3f5d67f5c0
- Size 74KB
- Sample220203-prdrcshba6
- SHA256 ad672b57e920a9dcd84f75423a250a00165b6555b4524c40475a5a3f5d67f5c0
- MD5 6fb95b5b4d069a2e3dcafe1d8470077b
- SHA1 fd97afb44832b583f6da778c9a0bc80c08b44f3b
- SHA512 0ef073c5d75942294188a2acd47ee395cd346dd34fb9103bea1472381cf025c657b18530c5a550b4599ce820b1b4852de9433bf8e9cb7db11c08522015b26356
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
ad672b57e920a9dcd84f75423a250a00165b6555b4524c40475a5a3f5d67f5c0.exe
Resource
win10v2004-en-20220113
0 signatures
0 seconds
Malware Config
Targets
-
- Target ad672b57e920a9dcd84f75423a250a00165b6555b4524c40475a5a3f5d67f5c0
- Size 74KB
- SHA256 ad672b57e920a9dcd84f75423a250a00165b6555b4524c40475a5a3f5d67f5c0
- MD5 6fb95b5b4d069a2e3dcafe1d8470077b
- SHA1 fd97afb44832b583f6da778c9a0bc80c08b44f3b
- SHA512 0ef073c5d75942294188a2acd47ee395cd346dd34fb9103bea1472381cf025c657b18530c5a550b4599ce820b1b4852de9433bf8e9cb7db11c08522015b26356
- MD5 SHA1 SHA512
Score10/10-
Contains code to disable Windows Defender
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
-
StormKitty Payload