General

  • Target

    0337e24c1287c195321a477cb6b71ab3

  • Size

    15KB

  • MD5

    0337e24c1287c195321a477cb6b71ab3

  • SHA1

    145823c8665a1761c41b7b1c699b242badf553d5

  • SHA256

    26e94627a3abe752072319b8eca4f68029a27090f89de5b92d4f700fc0f4f0b2

  • SHA512

    97303432aaec89988991d8489868e92ad6153e7a2a9addac3af275e01671562fc71931d65d805ec17ef3379d72c56e313cea3fbf58b40b71d6a18e14ed3a5459

  • SSDEEP

    384:QWWW+D9PmEwdEgKCmbCDd+kuZ9WhptYcFwVc03K:QVW2PNwdhgbkk4rtYcFwVc6K

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0337e24c1287c195321a477cb6b71ab3
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections