General

  • Target

    Crypted.exe

  • Size

    50KB

  • MD5

    5dd57385d3af83d5a7160e9c14aa09f5

  • SHA1

    64aabb5a9d77cbb8768779c7f3d0231465ea29f0

  • SHA256

    1f465a7b1dac4223346ba3070599d95dcdaa071d31d0e0a301322ee4433b4b7a

  • SHA512

    05eb789f336fe6d4280b085d86774bdc6e818e822a42a9165102dcbd478d16168dbceadd786783547db37f7635a5451211daea3fd008557a1d3f0533326e9ea5

  • SSDEEP

    1536:5GuV08a0ep7+bYrVNXUsyWSBY99w399hVkrf1t0:bYrVOsyWSBY99kq5W

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

Files

  • Crypted.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections