Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
z1.bat
Resource
win7-20240708-en
29 signatures
150 seconds
Behavioral task
behavioral2
Sample
z1.bat
Resource
win10v2004-20240802-en
33 signatures
150 seconds
General
-
Target
z1.bat
-
Size
33KB
-
MD5
97dc80d3844b01587d9fd6377b9ab0a7
-
SHA1
93b717a562f2cc3fdf2355bd9d2670ba2391cc60
-
SHA256
a668a98e57c03decf6ea76bb32f67f3f077ef2277e57f4117d44f4342977fddf
-
SHA512
c6401ff9e640b3f7c2aba8da3a73ccb1540591e7bbd6b8f3105813a60775882a6f4283009ef6fee3958ecdcef01830b57a9ec0a2cab8e2fbe34fbe15d1c84bbe
-
SSDEEP
384:AleKh+yq6zoptHpi4XR6Y+yGSU5GO3lXQDBmxsDaOEfOKhbyq6zoptHpwosG7R44:AlY3XRHC5GO3lXQDSsDaO0BdHqZQJ
Score
10/10
Malware Config
Signatures
-
Contains code to disable Windows Defender 1 IoCs
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
resource yara_rule sample disable_win_def
Files
-
z1.bat