Static task
static1
Behavioral task
behavioral1
Sample
ShadowNet.bat
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
ShadowNet.bat
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
ShadowNet.bat
Resource
win11-20240508-en
General
-
Target
ShadowNet.bat
-
Size
6KB
-
MD5
933a1442dcd7c84adba21901d5119f98
-
SHA1
8078e384973dfd55a8bb71571d78677806f6f42e
-
SHA256
41a732ac7cf44be865c9cb1d368c11eb27b21c111d3050536f36e59ede1691d5
-
SHA512
241ae81f5c43fbb720c3fdf0f3575c775ade564d65258d188c6e4c75f0e78e10cbff875e7d15b294079b47501faba34a9b758d1bb499938c175c5c184ddc8327
-
SSDEEP
192:dd8+55UyM8kqeIyRh4hCaRWzWXCaRWzWgMoUWqe71:j8+UyM8kqeIyRh4hCD6XCD6gMg
Malware Config
Signatures
-
Contains code to disable Windows Defender 1 IoCs
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
resource yara_rule sample disable_win_def
Files
-
ShadowNet.bat.bat .vbs