General

  • Target

    test.exe

  • Size

    83KB

  • MD5

    a6b26048db985e0650afe95c2c482827

  • SHA1

    d8d665ce7a47a47c4b2f9cd1abb03452e35efe43

  • SHA256

    6eeddf7e3f74e5b3828b77e532da162e6bf11144ba7f6a7a10b1a24ee930f6e7

  • SHA512

    bdd2e5cd479098a697cb96915d1d5dfa5acc4170db28d056c2dc53747504dd34380ba0ecafd438546dcd33a39106e854651a49d7fa46bcf3df6e9163de170ccf

  • SSDEEP

    1536:CAMfrTX01OrGpRZNdbv66Claewnph6NuhmXdJ75oWxZ1pXQv6Qx+Jmf9bSNhqxj3:pDewnph1m7Zx4ndf9bAqhJkOei

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • StormKitty payload 1 IoCs
  • Stormkitty family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • test.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections