General
-
Target
d91ebe56ba05bc3c870a4add71888796.bin
-
Size
226KB
-
MD5
49a78c2b0b9a0264a6274ab1b4de2a0f
-
SHA1
3e4a5968a1a82cf693ae5da097616ba61db07e94
-
SHA256
3c3fca6b9ba8691a7f05917de0e57fccd676c54152276c7417252a611715e098
-
SHA512
6f9a2ce8b817b4a4621797a9422d8d26993963b4d9bc4a15ac97182480d3a32eeb2a10f4ae4c42bc4ecc49c93aff71a935434711d695c698ca76c9ceaa715af4
-
SSDEEP
6144:/bEpO0ONMbYg85CLYgf5mx/92n2MoJv/IPx:/aOEEg85CUgcxSfeA5
Score
10/10
Malware Config
Signatures
-
Contains code to disable Windows Defender 1 IoCs
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
d91ebe56ba05bc3c870a4add71888796.bin
Password: infected
-
7a2e179b971fd082d58bd71c62f5692c60af0f7a6cf53e68fb4e56b86277c7b2.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections