General

  • Target

    brawlearth.zip

  • Size

    29.4MB

  • MD5

    f863b4d85b5acf34638970760ede1223

  • SHA1

    a34c31f28148e588a7b18531a814af8ce8e62f8d

  • SHA256

    bc661f7822b4cf1ce1c36d4a7d5c67ea6969bd51b0e6776d277d6e28d0a580ca

  • SHA512

    eaf4588aea9ffb71734e1db163449edc7e1c7648419fb6de78730d39a628395dc437cf295c8871231168e5134de52c1ec5aa0221aa12056945f2f124e6d05bf0

  • SSDEEP

    393216:PIgP/Xo9wQM/yoBYis5OBA7PKiUG9KW+t6Mj/O6vnjvWoxC9ESaJ+d0mzVc9oVxJ:PjkwQM/1BrgT4XD7njAaBmgCxH6K9

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • brawlearth.zip
    .zip
  • Brawlearth.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections