General

  • Target

    Verdacryptor_V3.ps1

  • Size

    34KB

  • MD5

    d99e4723bcec4ba0f0a535c6b00bd502

  • SHA1

    3e7ed721dba818f6f3d9142739ebbca9195088d2

  • SHA256

    823728b3245cfd1ee43d84247211730b540c0cd692a934caaf492b7bb8a27e91

  • SHA512

    aca686e14b706378660405d74f7ce4c4c1e69df47949efbfd14dc5ab55943470932bfbc0cfe28bb7ea3b8d9e1de7c93c9b3317f89c720ac5e6e41fe171015891

  • SSDEEP

    384:thz/snUBSzj5mMEEpi0D04eEMls/11AUfoUHaWPw3+4CFYV5jIyJyXK:NM5mME00xEbrl6Yq+40+IrXK

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

Files

  • Verdacryptor_V3.ps1
    .ps1