Overview

overview

10

Static

static

10

207b710761...41.exe

windows7-x64

10

207b710761...41.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    207b710761b3330aa804c7a04d015b41

  • Size

    11KB

  • Sample

    231225-qcb5naheb3

  • MD5

    207b710761b3330aa804c7a04d015b41

  • SHA1

    82809b814f6006ccf2ecd49825f43c45acc475b8

  • SHA256

    8488b24dec28ad3940c5cfec018cb00b71e2eab4a4942acab8bc2a3db922dd5d

  • SHA512

    27756c01ff1653d29b784aad891e401701f471b3abf7844d96f442fcfb0c99bf3f3f3a039f751184bfaf40eb0a9bc11b4549f0825668e6f82e5d3e4ba028aaa0

  • SSDEEP

    192:8eMTczELU3cPcgNBbIN3ygty+aQQLPmq+D4jT5:pMTcAm+cgNBbIN3u5Dbe4jT

Score
10/10

Malware Config

Targets

    • Target

      207b710761b3330aa804c7a04d015b41

    • Size

      11KB

    • MD5

      207b710761b3330aa804c7a04d015b41

    • SHA1

      82809b814f6006ccf2ecd49825f43c45acc475b8

    • SHA256

      8488b24dec28ad3940c5cfec018cb00b71e2eab4a4942acab8bc2a3db922dd5d

    • SHA512

      27756c01ff1653d29b784aad891e401701f471b3abf7844d96f442fcfb0c99bf3f3f3a039f751184bfaf40eb0a9bc11b4549f0825668e6f82e5d3e4ba028aaa0

    • SSDEEP

      192:8eMTczELU3cPcgNBbIN3ygty+aQQLPmq+D4jT5:pMTcAm+cgNBbIN3u5Dbe4jT

    Score
    10/10

    • Contains code to disable Windows Defender

      A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks