Overview

overview

10

Static

static

10

Realtek.exe

windows7-x64

10

Realtek.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Realtek.exe

  • Size

    80KB

  • MD5

    9bcb1a253d07b610da76fd22ad176c9d

  • SHA1

    e5f8196083beab009db092fe891e88551393b247

  • SHA256

    3cf37367797ad61761ab44b22ec80c206d31411a604106d061be6935787b8110

  • SHA512

    1d0729cbff3905f937a59a9e56ed4c65cb805395cc430035b45bb82e1b06d8cfa490466d3661ade18b05e4be74ba642df1b61c03dbf7f22740373687261c5744

  • SSDEEP

    1536:FZno9xptw8VGHE1uWdas6vKPHvfpK3I5hxS9a/voKxjzxtV3wFrD:F+bZPfpK3g69a/voKhzxtdwFn

Score
10/10
stormkitty

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • StormKitty payload 1 IoCs
  • Stormkitty family
    stormkitty

Files

  • Realtek.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections