General

  • Target

    Downloads.rar

  • Size

    5.5MB

  • MD5

    2bfbd622d63b371100b0f2d9a5ddaae5

  • SHA1

    0ff3214a42ca6737aa913f1c70d3f6974e3754e6

  • SHA256

    933dd29f56122cc3026ea18af87676c1af74faf423f326e7a2f41d5603e003c9

  • SHA512

    c493c2545a425301678a868022c569f3bd3d76eab510faa77b6dd28fc74dddac4e950227dcfa8eb61bc3a1b5eb2be8d6099878cef21a68a6d03fc12201f1d652

  • SSDEEP

    98304:AJ25ew2yquO6/6mC1POC/vKfu+QQLUqnsjJcTIRUKKnI6VccjQ12pctYyjnBLS9z:0Ij2juO6/671POeEuNQQGcJcSK5VcSsY

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Downloads.rar
    .rar
  • Discord.AIO.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New Text Document (3).txt