General

  • Target

    VerdacryptorV5.ps1

  • Size

    34KB

  • MD5

    264c23138c8fa42c5349b813eaceadef

  • SHA1

    9b6775c974c762e3623e5a4d6a5889abb4c5483d

  • SHA256

    0d04aa56dc4d408adec27419813e9ab81841a0df73fc8a27844eb930ca7b7d19

  • SHA512

    4738506caa97ca0b07fc929abef76d8f1e9ef13139701101985457763a7cc5d13536f336879f2cab966618f55aa451768be646e04a98876a0ea2d8476384dbb6

  • SSDEEP

    384:thz/s2UBSzj5mMEEpi0D04eEMls/11AUfoUHaWPw3+4CFYw5jIyJyXY:EM5mME00xEbrl6Yq+409IrXY

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

Files

  • VerdacryptorV5.ps1
    .ps1