General

  • Target

    Slipware.exe

  • Size

    934KB

  • MD5

    41ff8faa788abe2ae78029da60de75c4

  • SHA1

    d95c51936f7426923c9f5cb6f5d67bfeb240ad85

  • SHA256

    3398ed561b1b17780754aaddd3ed2f735046dabe7701fc3fb9bcfabbfffb6b3d

  • SHA512

    0be30da85e452d532a9f138b4ee7e6643b6de7c9171b0c65c1469b00ce321be2e43d1008e514c394688d61cc7c911940b7fba9a513cb220d4b945feb3f33ae22

  • SSDEEP

    12288:yTEYAsROAsrt/uxduo1jB0Y96qHzrbgF8RmZ/24bqbqOnTElDrX6W85BoyrqFBi:ywT7rC6qTrbgmRSqb6DwBi6

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Detects Eternity stealer 1 IoCs
  • Eternity family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Slipware.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections