Static task
static1
Behavioral task
behavioral1
Sample
Verdacryptor_V3.ps1
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Verdacryptor_V3.ps1
Resource
win10v2004-20250313-en
General
-
Target
Verdacryptor_V3.ps1
-
Size
34KB
-
MD5
d99e4723bcec4ba0f0a535c6b00bd502
-
SHA1
3e7ed721dba818f6f3d9142739ebbca9195088d2
-
SHA256
823728b3245cfd1ee43d84247211730b540c0cd692a934caaf492b7bb8a27e91
-
SHA512
aca686e14b706378660405d74f7ce4c4c1e69df47949efbfd14dc5ab55943470932bfbc0cfe28bb7ea3b8d9e1de7c93c9b3317f89c720ac5e6e41fe171015891
-
SSDEEP
384:thz/snUBSzj5mMEEpi0D04eEMls/11AUfoUHaWPw3+4CFYV5jIyJyXK:NM5mME00xEbrl6Yq+40+IrXK
Malware Config
Signatures
-
Contains code to disable Windows Defender 1 IoCs
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
resource yara_rule sample disable_win_def
Files
-
Verdacryptor_V3.ps1.ps1