General

  • Target

    TEMP.bat

  • Size

    5KB

  • MD5

    4e2946ca73e70fe8a55c2b337eddaad6

  • SHA1

    8d7ed2aa4c3be49c176427594a552f320f3cdc17

  • SHA256

    a6962ad2b0464e361947aad98d7a94229b1cc22daf78c4767ac39a1c0930c1e9

  • SHA512

    c894b3cea8ae033e9cefbf03375d8fe548451831cac536226e2cb11805a6e8d7486033229dfcc9c41dcc1183901ec3dd7446e4131dc0093a9d7e4212d37acee5

  • SSDEEP

    96:F/nspmPEJqssIQJzPfDxr/TikCJieBXd9ZCcCE7NowTB/4wNIFoiIFol1mUD:FUp4EJPsIQ9fDpmkCMYTZCcCE7CwTVsN

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

Files

  • TEMP.bat
    .bat .ps1