General
-
Target
a3e23e553130cbdf0053a7c95311f11384f4e13b9b0a656a4506f6a5fdb618f4.exe
-
Size
5.5MB
-
MD5
70886787e1eb706d74c31142bc4e40ac
-
SHA1
66b2e3811c798490ff297463adc2ff3874463dd2
-
SHA256
a3e23e553130cbdf0053a7c95311f11384f4e13b9b0a656a4506f6a5fdb618f4
-
SHA512
175d3fbcff224abf8b9480b19ad83f0c4523668dfcd5bedfb6c84f1af8e09794e3a6a1cd58ba31ee9e54347a53951388879d4d2b8b9617945a5ed02d422411c1
-
SSDEEP
49152:CwleOjheUjqAK9/F6MTVXo/ZwxmD1QohH5iQ8dKl7UXLDzaIjnECy7o9aEKNJ6jX:nleOIf3K1wRLfaxyMU
Score
10/10
Malware Config
Signatures
-
Contains code to disable Windows Defender 1 IoCs
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
-
Detects executables containing artifacts associated with disabling Widnows Defender 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a3e23e553130cbdf0053a7c95311f11384f4e13b9b0a656a4506f6a5fdb618f4.exe
4f2f006e2ecf7172ad368f8289dc96c1
Headers
Imports
Sections