Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
TEMP.bat
Resource
win11-20240709-en
windows11-21h2-x64
4 signatures
150 seconds
General
-
Target
TEMP.bat
-
Size
5KB
-
MD5
4e2946ca73e70fe8a55c2b337eddaad6
-
SHA1
8d7ed2aa4c3be49c176427594a552f320f3cdc17
-
SHA256
a6962ad2b0464e361947aad98d7a94229b1cc22daf78c4767ac39a1c0930c1e9
-
SHA512
c894b3cea8ae033e9cefbf03375d8fe548451831cac536226e2cb11805a6e8d7486033229dfcc9c41dcc1183901ec3dd7446e4131dc0093a9d7e4212d37acee5
-
SSDEEP
96:F/nspmPEJqssIQJzPfDxr/TikCJieBXd9ZCcCE7NowTB/4wNIFoiIFol1mUD:FUp4EJPsIQ9fDpmkCMYTZCcCE7CwTVsN
Score
10/10
Malware Config
Signatures
-
Contains code to disable Windows Defender 1 IoCs
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
resource yara_rule sample disable_win_def
Files
-
TEMP.bat.bat .ps1