General

  • Target

    57e85409564bed14d33d2ae2663b2bc64f99588c83b208f9091eceaf87097c1b

  • Size

    100KB

  • MD5

    b7756f9d9e8c5f4ba2c930adb666fbae

  • SHA1

    8ddb9f2a559f6af5ccaa04c8b5b589d216357340

  • SHA256

    57e85409564bed14d33d2ae2663b2bc64f99588c83b208f9091eceaf87097c1b

  • SHA512

    c5c85c86251c34530b672de0feee38bd148cddd53beb7191a250f09e6d504460c343a0f608e2002434e4b98585e61222f44bc159bfb2a340c0e73a3941bef67f

  • SSDEEP

    1536:DQIAibOVOk3udovOyePC9Eop2h90L64QG9iDCzPgQD8Kg90a//MudDBG:DQ/ibOcIudovOy8CUwIOkCzgQq0UzxM

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

Files

  • 57e85409564bed14d33d2ae2663b2bc64f99588c83b208f9091eceaf87097c1b
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections