Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
metsys2.vbs
Resource
win7-20240508-en
windows7-x64
0 signatures
300 seconds
General
-
Target
metsys2.vbs
-
Size
12KB
-
MD5
83d3b5d923b98eeede835cf42c421b88
-
SHA1
88deadba537ac2f0a04ae2e9360df4edab377fa4
-
SHA256
ce96bdffa372369e98259cf000ec1573928c1297137b5eed60a68515109f561a
-
SHA512
2c248f4621464576db9437b16d57fdc950f6d8673c7ebdc716be1eee280ada55732e3164f2cf833fc7adedb15e31e96c0f1d4d89862995fbc57ef9d8851d55ce
-
SSDEEP
192:gXNFTqypFhNDqBOljhlrhX0NGIo/4iP/xP/ZP/9P/33awI:Gq7BahnENSwoxpNfW
Score
10/10
Malware Config
Signatures
-
Contains code to disable Windows Defender 1 IoCs
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
resource yara_rule sample disable_win_def
Files
-
metsys2.vbs.vbs