General

  • Target

    adba9ca0a8afb51a068b881dc6b29b2b

  • Size

    5.5MB

  • MD5

    adba9ca0a8afb51a068b881dc6b29b2b

  • SHA1

    718643a6159855e5259698eb4343f8b30e5be0b5

  • SHA256

    8862636861e0bb63dbb1c90a72bac6a40746efa23d007ced52614a655741a650

  • SHA512

    6a164e7fb181d19a1d9b919fe87a464282fedb530802a880d08cfd123a56b5018ad546439d525fcba1ae4af74252c926cd4e7f2fc12cedc0b753f6ccb698f8fc

  • SSDEEP

    98304:ElmIVklHCZfKvrU11lwGxZ73+v6PodSkKfwrwX:OVk5GXlLZ3PNWI

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • adba9ca0a8afb51a068b881dc6b29b2b
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections