General

  • Target

    Client.exe

  • Size

    37KB

  • MD5

    048fe49f52753db44066d27b0580d2f8

  • SHA1

    b2d9ef5648b6b415e9be4ffdb1286e15eb90f153

  • SHA256

    a006719ff448688c915fc431666e4783692de934a5b1237bb7230f7acfd47c76

  • SHA512

    003dd4ed57dfa365a83a60688272a6314fc3593eca64c64934641d86d33a44805a393c5a3702abd5eccb7711a019a109e13a25a924619d4bdd84c48fa6136139

  • SSDEEP

    768:749uWWM/0WnjeOSJd0CDTRTPfuk+/Ct3PO9gYhGIs6qcy:2uWWRCjebzxRrftlm9bhfsOy

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections