Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
script.vbs
Resource
win7-20230712-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
script.vbs
Resource
win10v2004-20230703-en
2 signatures
150 seconds
General
-
Target
script.vbs
-
Size
2KB
-
MD5
b7c7a83ea03d45b774176b267d13fbcc
-
SHA1
a60440bbf493f8563f590b026cbca074a385d997
-
SHA256
23dce1b81dd0c489b5e97cdcc46fd05b88c7eb3b4b98de5eb2b73eb204baa637
-
SHA512
df876487d6f6a507627a4478c244c758508ccb554c1f9fa4e65833b779755b19e64a197bebd7ee082e8d51b0f1734ea71ea1fe017dd2d6873d5343c7ded8dd15
Score
10/10
Malware Config
Signatures
-
Contains code to disable Windows Defender 1 IoCs
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
resource yara_rule sample disable_win_def
Files
-
script.vbs.vbs