Overview

overview

10

Static

static

3

cbb2935e49...b2.exe

windows7-x64

10

cbb2935e49...b2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cbb2935e499f3c88e862bdd46f5710774b232aa9ba85cc30006236a6f4503db2

  • Size

    3.5MB

  • Sample

    241120-psjn1a1neq

  • MD5

    d51eb63974474a6e7547c8f3ee8f5c93

  • SHA1

    858252c9d48b5849176b19dc464af8a3ce9d6568

  • SHA256

    cbb2935e499f3c88e862bdd46f5710774b232aa9ba85cc30006236a6f4503db2

  • SHA512

    89b7538c3e074be0a4872768b2a36527af06f47137010e1bb8bf8263cb6d1ba3c5158666b79779589db50eb97cea765aaf49953fa918630e12c0c037c4704205

  • SSDEEP

    49152:gOWEd7uyb66vtNOeRohANG6POCJ3xBaInIl3dOGKpW8tchWqVAMbv+:LWEJhbBRovCJ3xB1nhWdhWqVxq

Score
10/10

Malware Config

Targets

    • Target

      cbb2935e499f3c88e862bdd46f5710774b232aa9ba85cc30006236a6f4503db2

    • Size

      3.5MB

    • MD5

      d51eb63974474a6e7547c8f3ee8f5c93

    • SHA1

      858252c9d48b5849176b19dc464af8a3ce9d6568

    • SHA256

      cbb2935e499f3c88e862bdd46f5710774b232aa9ba85cc30006236a6f4503db2

    • SHA512

      89b7538c3e074be0a4872768b2a36527af06f47137010e1bb8bf8263cb6d1ba3c5158666b79779589db50eb97cea765aaf49953fa918630e12c0c037c4704205

    • SSDEEP

      49152:gOWEd7uyb66vtNOeRohANG6POCJ3xBaInIl3dOGKpW8tchWqVAMbv+:LWEJhbBRovCJ3xB1nhWdhWqVxq

    Score
    10/10

    • Contains code to disable Windows Defender

      A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks