Analysis
-
max time kernel
120s -
max time network
139s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
22/03/2025, 06:10
General
-
Target
4bc17871c10bb28c4e2b5e2f1d9e4664.exe
-
Size
28KB
-
MD5
4bc17871c10bb28c4e2b5e2f1d9e4664
-
SHA1
d6d80515426201c41e12f04fe8ec7f8c0f54b85a
-
SHA256
9174ac9bc0d3b5cc062f11c6b97f7a92f9e117b77fe4cbc148ca40e7cb99d302
-
SHA512
2ba6f62b059e59339bf62dfc7e6cb439f7a64904cc6065294c20c71ecec86e8b215075069bbda4171d001881489382eb7809801cb2dfc280f8f483429a99e5bd
-
SSDEEP
768:GEHTMg84YFnOVMSloeM41v1WbVgkgm3HrQQ:GEHQg84ofSxCekX3R
Score
10/10
Malware Config
Signatures
-
Contains code to disable Windows Defender 1 IoCs
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4bc17871c10bb28c4e2b5e2f1d9e4664.exe"C:\Users\Admin\AppData\Local\Temp\4bc17871c10bb28c4e2b5e2f1d9e4664.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2388 -s 5362⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
56KB