General

  • Target

    NEAS.e98d49dd5cb6edd2109ed73e20783f30.exe

  • Size

    6.2MB

  • MD5

    e98d49dd5cb6edd2109ed73e20783f30

  • SHA1

    bdadffa0f5a64b50ce4ef9a5a9cd8888d163c1ac

  • SHA256

    5290a02e5f7eb06823327ddaf9a77287c317ba79e7a0e7bb6b02753a6752663b

  • SHA512

    1a230f9ce3072b875cce01e273fd61d7145cbcda3a3cc9cd4439b309bb281ea934bf8de79b4c408e301a68e9e6c0d2ea6835697d93c1d6d5da8fc0ab553a09f9

  • SSDEEP

    196608:2PfndQmRrdA6lXCy1ArqkVpKCX+PrF4ZIegh1j0QawwJ:QfndQOlXrAZYCuPJOIegjjx

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.e98d49dd5cb6edd2109ed73e20783f30.exe
    .exe windows:5 windows x64

    0b5552dccd9d0a834cea55c0c8fc05be


    Headers

    Imports

    Sections

  • 1.pyc