General

  • Target

    Hazard-Nuker.rar

  • Size

    63KB

  • MD5

    3e4cba834e5816dd53214b87db33db08

  • SHA1

    6aec8b656a1c042347267735c79c87bd28d6fb32

  • SHA256

    54977b912c095aad3344503a6ac190ff9371bb22bb9d71e28aceec66dda8b777

  • SHA512

    7cf5e616beb6df3814c796120a4c8a5e7b62ddb5ce92f46a1234cf1bf96e4f00ed282ace518cee01dfa8f67db0faa492c06ef47224f872db551f3aa63dbfc800

  • SSDEEP

    1536:yUwHAygP4H0roH5NMHHj5MGUqLroVHJuWGo:kOBk/MeGep

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • StormKitty payload 1 IoCs
  • Stormkitty family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Hazard-Nuker.rar
    .rar
  • Hazard-Nuker.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections