General

  • Target

    lazymetsys.vbs

  • Size

    1.1MB

  • MD5

    050268ee028ca328981728f4043de9f3

  • SHA1

    79ca479597ffa0c9d398cf018abd788f6149c4f7

  • SHA256

    418eab1fd0bc41f26be9f59f40246a7bd6aa11a87a780372bcbd25544355c075

  • SHA512

    0516aa8668bc869c848789a4dd568604c49c455eec1a9c575895befffcdd38421ff8b75ad142fb5b00d08c3d57b870f730acd25418cf39b8dc5541b461d72e62

  • SSDEEP

    24576:djSdueeKiZeXA940z802o5mNBriKgcdgUixQsUg5:djSduKCeA2oqdJqf5

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

Files

  • lazymetsys.vbs
    .vbs