General

  • Target

    612da471170664857e3d2664de3ea1fd4e49e0c11e6dc8634fdedc3e124da50e

  • Size

    5.0MB

  • MD5

    c397fb982e17864f20351d3373ddf5c4

  • SHA1

    5faeebc437ffc1f4421ed583f8a062969e3d1785

  • SHA256

    612da471170664857e3d2664de3ea1fd4e49e0c11e6dc8634fdedc3e124da50e

  • SHA512

    2bcb9b3ee5e20621a89fbfdadacad19d2802a4c65a0766c373d66e1ba2e79fcc8651fc59ba5393a5d956b85920e97164240f02677a94faa5b9be1a817a58c364

  • SSDEEP

    49152:b3ekHRqJxSKAb5UvgW0R68gFUuN5LDmTmSZewUnvN0kPt7CvKIQw3QbTirHsb/sl:bOkxMAWTIQJEnW6at

Score
10/10

Malware Config

Signatures

  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 612da471170664857e3d2664de3ea1fd4e49e0c11e6dc8634fdedc3e124da50e
    .exe windows:10 windows x64 arch:x64

    03e2a67074f8d826b713cdacb7211997


    Headers

    Imports

    Sections