General

  • Target

    de4ac40ccbe2d134328c5187d9dfefa7

  • Size

    21KB

  • MD5

    de4ac40ccbe2d134328c5187d9dfefa7

  • SHA1

    4cf401068f3cf54935e77c23426fe60d1cfedbe3

  • SHA256

    999cc90807e49f7b188a26ee3524e47dc74316e503b5052af3e1e77977a82d1e

  • SHA512

    b7183469f98b90351c063c07a4967cec61559a728fa9e98ae03c0e2f0febdffa5e1bc3624e39da84465784d35f84b494a966f7f8c825573a839e12fcb266aca3

  • SSDEEP

    384:xdpMsJTP+6OFyf/o0xPSzbbVxu6FVnj1jPGUc5tuTpqKi3hC4hKDDaJ/0kKJ:xHMsJTP+6OFy3LhIbbdFhfc5tuTpqKYS

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • de4ac40ccbe2d134328c5187d9dfefa7
    .dll windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections