General

  • Target

    514ad1eaefc12109832598d69fead765.exe

  • Size

    2.6MB

  • MD5

    514ad1eaefc12109832598d69fead765

  • SHA1

    2eed7ea1c3f5f82ed2848176fecb6f97a212487b

  • SHA256

    2642cf425401919058f3981251bd774c7d65cbd7d97d5fe5b7451b8e09f133bb

  • SHA512

    8523186aed59b6a5a361886cb74433d8d846089a4818d330ac8e1904a3810de06d85414f13285f7e5e1cdb35c4f6597922167c18647d2c749def38b6f906b714

  • SSDEEP

    49152:xBO0my9ash+6Yt2RU/mWxc4Tlo2iZOen7Xy/RuEIqjufVAnLx35:PO0b1YsRUDa4kZp7MRu1qjSGnNJ

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 514ad1eaefc12109832598d69fead765.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections