General
-
Target
GrowtopiaProxy.exe
-
Size
901KB
-
MD5
ae8853311b3f374068ebe50b5d311fe0
-
SHA1
3f3175bdfa43fc538aa814d8121fa740d82d3be4
-
SHA256
c02c592855d900dad06e53cfa2dc7cb8d0a1f618c0ca07f46d4707d2c561a703
-
SHA512
48862ea918a78d26b7346aa9f8e4826040eb6a7cb979889fbb1d10c9a529563564e99b4e5bbb789171f30aa92d04061cd40cb694b07d48f9f554f356b0e24565
-
SSDEEP
12288:2TEYAsROAsrt/uxduo1jB0Y96qYRPLf0v4Y4qBDhVqtUe81lupcOzk/AXy:2wT7rC6qOPLfhUQUe81Ilkl
Score
10/10
Malware Config
Signatures
-
Contains code to disable Windows Defender 1 IoCs
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
-
Detects Eternity stealer 1 IoCs
-
Eternity family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
GrowtopiaProxy.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections