General

  • Target

    a3977fd383059a9833f42178061c0038754a19a76891aed5f38f36cd0300f709

  • Size

    87KB

  • MD5

    2ef91650e60c37e9f0b35c3d7e172848

  • SHA1

    76f18f62b8560e77141e0a1c21b0780187fdfdb9

  • SHA256

    a3977fd383059a9833f42178061c0038754a19a76891aed5f38f36cd0300f709

  • SHA512

    be8f454bedbacdc0ac0a07323f951426b917c087cbf533f80d761e03af18bcfe179c762014878a7f5a22c8925cae1498f1d18c792a943b5bce45c636c81cde3f

  • SSDEEP

    1536:OXMLuZQG3KJ3QaIH9shR4fZcvr4C9u3MTIdD9mtthd9JovrgmqhtvM4CoLT6QPbi:gMLuZraJ3a0ehcvv9sM+9mtthd0gmWk9

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Thanos executable 1 IoCs
  • Thanos family

Files

  • a3977fd383059a9833f42178061c0038754a19a76891aed5f38f36cd0300f709
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections