Analysis
-
max time kernel
175s -
max time network
196s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
13-10-2023 02:17
General
-
Target
PolymodXT.exe
-
Size
550KB
-
MD5
c7692b713225ebf0138f3e93ea1e6fa6
-
SHA1
0c0181326a0a91a7622a582470c317766a29a9d5
-
SHA256
2f67f590cabb9c79257d27b578d8bf9d1a278afa96b205ad2b4704e7b9a87ca7
-
SHA512
b492fb9918154082715a54a9436bbfd78f3cb1c5036a44857034a4a93498c634a19840af93e15fe1a283da285f1f806824e657660139215fb5f26024ab365778
-
SSDEEP
12288:8l1DS0q8hoY1IWt6HTZ/QeMK2pOtOOugi7YZb9MaCs64vPtz6JERgpptZigfScUo:k1DSCt6qhKxO
Score
10/10
Malware Config
Signatures
-
Contains code to disable Windows Defender 1 IoCs
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
Processes
-
C:\Users\Admin\AppData\Local\Temp\PolymodXT.exe"C:\Users\Admin\AppData\Local\Temp\PolymodXT.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.9MB
-
Filesize
576KB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
256KB