Overview

overview

10

Static

static

10

Anarchy.exe

windows7-x64

10

Anarchy.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Anarchy.exe

  • Size

    16.1MB

  • Sample

    240915-mazw6aycna

  • MD5

    56373fb76365e161485614ff91d4030b

  • SHA1

    e2429e6e2953a948e8756a5ff7e87a68bdceabd2

  • SHA256

    e208fae2282697cdce4471ce296d4750743acb5b8e7ff09217667a69041243a7

  • SHA512

    27c8138c50b473121694b9ce4412d9757b7d74299df25aa5a6693578f05039c6d2f30367100732f16bbff42c78a8d27176d39a0c71d090ec5f18a70d31f1f40c

  • SSDEEP

    196608:i5CpPOu/P8G2eee0yMRs4vkmXaU7aIObk9fcdHJDLscmZk36zOAE2A1cZF7sL9YR:s+r0TaZ1LmZ+F1cby9YN/X

Score
10/10

Malware Config

Targets

    • Target

      Anarchy.exe

    • Size

      16.1MB

    • MD5

      56373fb76365e161485614ff91d4030b

    • SHA1

      e2429e6e2953a948e8756a5ff7e87a68bdceabd2

    • SHA256

      e208fae2282697cdce4471ce296d4750743acb5b8e7ff09217667a69041243a7

    • SHA512

      27c8138c50b473121694b9ce4412d9757b7d74299df25aa5a6693578f05039c6d2f30367100732f16bbff42c78a8d27176d39a0c71d090ec5f18a70d31f1f40c

    • SSDEEP

      196608:i5CpPOu/P8G2eee0yMRs4vkmXaU7aIObk9fcdHJDLscmZk36zOAE2A1cZF7sL9YR:s+r0TaZ1LmZ+F1cby9YN/X

    Score
    10/10

    • Contains code to disable Windows Defender

      A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks