General

  • Target

    GrowHack.exe

  • Size

    1001KB

  • MD5

    b8d1446878c406d108dc8e4952010a4a

  • SHA1

    2276d53b8f5437ac70d66639181ff6a89a5a9b6e

  • SHA256

    642fefcd427816d35ac72bd7cb542293df83c5b649b927cdf95b3e1718e4ddb7

  • SHA512

    858b0e4d51ca2c5a481f0f2711f35f4430d8b90ebe52686c0c9d485889c2b44f64b53d32ab97147b91f0918b1d3bd5656bd52738ef10b4a9a485c76c6cd8dba0

  • SSDEEP

    24576:QwT7rC6qWbGbQ/JX3R//yGJYXz2P9fNoiA:xrC6qW6SJXB//2XClfuF

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Detects Eternity stealer 1 IoCs
  • Eternity family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • GrowHack.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections