General

  • Target

    c9e4fd95c8b123d74b69bbf7384c6957e8b90d74f585d35dc6ec20ba5d1c3d56

  • Size

    76KB

  • MD5

    3599b17790073f51a758d8f5bf57ef68

  • SHA1

    93e044b9adf042d19228640113fa9382a965a4cf

  • SHA256

    c9e4fd95c8b123d74b69bbf7384c6957e8b90d74f585d35dc6ec20ba5d1c3d56

  • SHA512

    22b5900d14e337c04e3bf171680949e711e72531ce9c76be422595a9ac3ae2981f4fc4f32418ad8ae6a9cb5577ca7a75d8379317f0ef9c2c05fabd7eb62167c3

  • SSDEEP

    384:ginPKOE2vka0bhvmkUzbqY8RJ3lNHNuPoNAiOiPGCaCamuO7XOlNR1H2trITfnnl:gia0bCHzgPoKiOi+CaCaIW7

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

Files

  • c9e4fd95c8b123d74b69bbf7384c6957e8b90d74f585d35dc6ec20ba5d1c3d56
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections