General
-
Target
MegaDUP.exe
-
Size
907KB
-
MD5
30a11f18ff51c28962b610c64159cb13
-
SHA1
27f8e093479cd15a9b3e44967a81dada4331307b
-
SHA256
23da6246fcd9a93ea5a3e2e320c4a6cfa27173e42a9a8215f537bb660ad0702a
-
SHA512
8170174a270db4089c879805f4b9569c04504d59698d05081db25d31754bbf7f8b63399ecdd5b3fc54b43c230bd3886b4eeadccdd4e53a69bf168f4a4cbe9408
-
SSDEEP
12288:xTEYAsROAsrt/uxduo1jB0Y96qvqAMnSy/SQ0TxvesHunNxujYcTkaeSPsL:xwT7rC6qvqAyN/ZgxvFHunNkjYcYssL
Score
10/10
Malware Config
Signatures
-
Contains code to disable Windows Defender 1 IoCs
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
-
Detects Eternity stealer 1 IoCs
-
Eternity family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
MegaDUP.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections