General
-
Target
Autofarm.exe
-
Size
902KB
-
MD5
c83093e96402aaf8c5afe4c12d1d162d
-
SHA1
6b52e3cb21a3941c31da0dc3f559b7d45c99630c
-
SHA256
4ef2f891081c62206d7277e2962377b3914da6f3d8912f56f415ec32474069a4
-
SHA512
57aec652d34f0db9276908facc1faa3647a9464ba362055281fe6f04916d6f579e6f7f506903b4484d076e8d585e3c8cb6dade912e60543a6ddefd707aa3f9dd
-
SSDEEP
12288:YTEYAsROAsrt/uxduo1jB0Y96qTqQaSMpyYCHopdCln3EWp5XdUHtY5:YwT7rC6q1aTpyYCHyIln3EWp5AY5
Score
10/10
Malware Config
Signatures
-
Contains code to disable Windows Defender 1 IoCs
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
-
Detects Eternity stealer 1 IoCs
-
Eternity family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
Autofarm.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections