General

  • Target

    Discord.AIO.bin.zip

  • Size

    5.6MB

  • MD5

    c45eef2a7aeee351e503aaf75080f87e

  • SHA1

    d16ff5a74682844e9d8b2273cbeb23fb3e165039

  • SHA256

    27d435dd9e90742b592236e4287f6d729194879ad8d86dad1eb57a80370277ea

  • SHA512

    50a2436665278b37d6f416df574410c291e60e4b1982da8b2296408e99c40e4b54cf3beacaeffc88caf96711046497ebe3e15deea07dde46edda72d7c3a2a1d3

  • SSDEEP

    98304:Vn5bol3QM8s9/s4wWh35KN9/TyAIv9ZVYjSaefJUWe/:VKl3/txuv/mnnVLfJUWe/

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

Files

  • Discord.AIO.bin.zip
    .zip

    Password: infected

  • Discord.AIO.bin
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections