General

  • Target

    1a546696a2a2f6200fa3819902330680N

  • Size

    9.1MB

  • MD5

    1a546696a2a2f6200fa3819902330680

  • SHA1

    8bf79dc5b098f70bdffc4935bbed4a7ca4e68ffc

  • SHA256

    e14d66e8d12a2cefc3d1e97032a32b6c453f5a85b47867c051889354ebac9240

  • SHA512

    101445a3aa73d9e78921373141c653b73de8315f7ee7394d529bdd097b3dcbf279022a150e07c630a40c98ce76567264abf5059a4188e5cdc18c448b886992ee

  • SSDEEP

    196608:hjRHvCQ6hRIpjjEaPdR3lm8NtafV+OaiolsCmXt17JXpggj/6geeEhC2kqxhEEzZ:hjRHvCQ/BR73w8i0OXolsdpvVehCKpoq

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1a546696a2a2f6200fa3819902330680N
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections