Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1.ps1
Resource
win7-20221111-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1.ps1
Resource
win10v2004-20220812-en
2 signatures
150 seconds
General
-
Target
1.ps1
-
Size
2KB
-
MD5
12fed9c71399f4c3c1d84685b1ce9be1
-
SHA1
7d19aa887d0a4b856516af06b8098e5dce6f1beb
-
SHA256
b8172c58aa7bf985cfee71509205791599496b602bdbd56b6cf9164eec7658d0
-
SHA512
e38035e81956d77f2aadc526b1ed131267d422bafa3ef66f39ca0d198acf87fb6d915abc031536e2dca0a9d34e0f5f887c27f7dbbeb52d09ac1f741aa3527787
Score
10/10
Malware Config
Signatures
-
Contains code to disable Windows Defender 1 IoCs
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
resource yara_rule sample disable_win_def
Files
-
1.ps1