Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
VerdacryptorV5.ps1
Resource
win7-20240903-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
VerdacryptorV5.ps1
Resource
win10v2004-20250314-en
16 signatures
150 seconds
General
-
Target
VerdacryptorV5.ps1
-
Size
34KB
-
MD5
264c23138c8fa42c5349b813eaceadef
-
SHA1
9b6775c974c762e3623e5a4d6a5889abb4c5483d
-
SHA256
0d04aa56dc4d408adec27419813e9ab81841a0df73fc8a27844eb930ca7b7d19
-
SHA512
4738506caa97ca0b07fc929abef76d8f1e9ef13139701101985457763a7cc5d13536f336879f2cab966618f55aa451768be646e04a98876a0ea2d8476384dbb6
-
SSDEEP
384:thz/s2UBSzj5mMEEpi0D04eEMls/11AUfoUHaWPw3+4CFYw5jIyJyXY:EM5mME00xEbrl6Yq+409IrXY
Score
10/10
Malware Config
Signatures
-
Contains code to disable Windows Defender 1 IoCs
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
resource yara_rule sample disable_win_def
Files
-
VerdacryptorV5.ps1.ps1