General

  • Target

    cmdd.exe

  • Size

    4.4MB

  • MD5

    79878f3e77d8d318fd31c76d900d483e

  • SHA1

    36b7dc89aa5f57c3f1e398ca12cbf7e3e33b7abc

  • SHA256

    fc33593b600efe9c297c60c71b10807c4af1ad7d72126d9cca6a372e43864cb8

  • SHA512

    4b93503777ae14c3cface3e2d1335707141a77376c3150c01de84f9bf308b2830be78687ac70f1046acabc90ba33ea4ee53b6961a4385bbe8ea29534e9857570

  • SSDEEP

    98304:hRQ4RQ6KjYXC3UdKep9y1nIT4bNJFY3OqtEnrqkqXf0F9+KH4kpc+DX/0HWAW:jD1yEdKepwljBHYk2kSIEKYODmW

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cmdd.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections