Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
kk.bat
Resource
win7-20230831-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
kk.bat
Resource
win10v2004-20230915-en
5 signatures
150 seconds
General
-
Target
kk.bat
-
Size
8KB
-
MD5
194c91bd8c0baf0d7c2fdfedce1cab4a
-
SHA1
314e7df22c55810570e09c7a1d52814a03bc6b37
-
SHA256
b8627098067dcc39f9dc86d502eb6b18cf30814a1ac1efa1fa3d9f80c0efe812
-
SHA512
44f1d878e8bc12e4c736380882a039d3e6233e484ef0d5f0425c348041d75b2c0e0dc8c73602ed5dd76fdb4c09094d66085558811aafd12715caa98cd69f4d81
-
SSDEEP
192:tPPQXp5dvkaXa05CACvEMI5CECvEMwNHZoaBl/9cOBCU09Ccd1:tP45nvxTvps655p1U3
Score
10/10
Malware Config
Signatures
-
Contains code to disable Windows Defender 1 IoCs
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
resource yara_rule sample disable_win_def
Files
-
kk.bat.bat .ps1