Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
taskbroker.vbs
Resource
win7-20241010-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
taskbroker.vbs
Resource
win10v2004-20250314-en
12 signatures
150 seconds
General
-
Target
taskbroker.vbs
-
Size
3KB
-
MD5
ec056bdc0223f3f5df9ae591cba9b24c
-
SHA1
0f1688d29ef4d471664e5091b378250b3bea2805
-
SHA256
af65072fd228a47cc3e8a8d1461688c1b53c2ec91949b472decba4d97289253b
-
SHA512
2e0ae2af69b93cd6dd27aab7d8a04f02db6b2dc7a47d50e1ee9e91cd5461733bb8176dd0ed696ecb77a7514541db7449eacf43d07a933c8c8e0c82897eff0ac4
Score
10/10
Malware Config
Signatures
-
Contains code to disable Windows Defender 1 IoCs
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
resource yara_rule sample disable_win_def
Files
-
taskbroker.vbs.vbs