General
- Target 2b749e1fc1c66a33ae6f51bc459a3967d2e98da9a8ca88bb4bd4b6d0ad36c808
- Size 319KB
- Sample260710-exrkases4t
- SHA256 2b749e1fc1c66a33ae6f51bc459a3967d2e98da9a8ca88bb4bd4b6d0ad36c808
- MD5 831e6962263caa0e670f96ae87772734
- SHA1 627657cc818e00134fe4abf8f889253b21b82d06
- SHA512 6e032901da8eed30116e70212500ae9f2c4a4d4d4e44b9c89f69bb2461dd6cce310b3c230b1f660fe7954e155307d89cf217ca1afb2548abadd23dde62ab0527
- SSDEEP 6144:b2MZAw+jKyLCN+Md6lFJOhpLvcldwvisgFc9BqJevg8WiTZDYXLG7f2e:b30frMQV4sd6isGIB+evg8WixILG7fh
- TLSH T13764234012B14A05B6C2476B1EADB842FEAF4724448758DBBBD105DC8BF660D0AFE9F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
禁用或启用Windows Defender工具.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
禁用或启用Windows Defender工具.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 禁用或启用Windows Defender工具.exe
- Size 554KB
- SHA256 79fb4cf1ea8c57c7617e87a96eb1e58e2d546e6e633125f4d821f846d1061a5b
- MD5 cb59c63edfc5b2ac8d4089c17b54087f
- SHA1 b6814960d185b3f3e9459a4de3dd5e2d8d7cc0ea
- SHA512 b4e41694740f7fcdd47b5cdaa31beb9256ae19259cda6c4b2a0eaa3812ff219c66ac4a3f6b16cea9ef2781c2035bc8ae555e9e1ab32669f95c50b3ccbde05b6f
- SSDEEP 12288:JngM8K8P4ElXddah8kyDIZQmJ3Bwevg8jlWILI9vp:JngHKYfXTkXy0ZQdev7Bfu
- TLSH T1C2C4AE59E7E404FCE4B7E1B8D9524902E3BA7C4D0761D78F13E866562F336A09E39B20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.