Overview

overview

10

Static

static

10

KEYAUTH-JC...SN.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    KEYAUTH-JCYROb-K8RFXU-in4i21-frOxf2-XSmTeQ-ucn8SN.exe

  • Size

    4.6MB

  • MD5

    5cd047e22ab96b87f311467a9dcc6b0c

  • SHA1

    0fa239f08a5cdb4ff9b773e4525449384dbee97b

  • SHA256

    11fd553493090ecf53ab9a9eee7eaccd838e6e66b5a90100bfe2e8f8699cea7d

  • SHA512

    494d7bf4476f994212617fdf986aad87990939037c2541be51daf051ee41cac5e2112e3695b30549507b53d759c798e1c2a9e9601f042ffc566090dcc0d3014c

  • SSDEEP

    98304:tKjYXC3UdKep9y1f+bEszBfhBVnT0nrykqXf0F1+KH4kpc+DX/0H2Ye:byEdKepw8b5zBXVnTEekSI8KYODGe

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • KEYAUTH-JCYROb-K8RFXU-in4i21-frOxf2-XSmTeQ-ucn8SN.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections