General

  • Target
    Disable.ps1
  • Size 49KB
  • Sample260619-vwpmbaa19x
  • SHA256 43ead05f93a3a37afd32fd95010860f0aacac99e3672a20486b71aea4546b73f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

File Explorer

  • Disable.ps1
    .ps1 49KB

Disable.ps1

  • SHA256 43ead05f93a3a37afd32fd95010860f0aacac99e3672a20486b71aea4546b73f
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Contains code to disable Windows Defender

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.