General
- Target disable-defender.exe
- Size 280KB
- Sample260722-zbtsrazxcz
- SHA256 897307c0487c3f7376eedf6b3f999559e0aa16855571f30aef4621583f7ff46e
Score
10/10
Malware Config
Targets
-
- Target disable-defender.exe
- Size 280KB
- SHA256 897307c0487c3f7376eedf6b3f999559e0aa16855571f30aef4621583f7ff46e
Score10/10-
Modifies Windows Defender DisableAntiSpyware settings
-
Modifies Windows Defender Real-time Protection settings
-
Modifies Windows Defender TamperProtection settings
-
Modifies Windows Defender notification settings
-
Modifies firewall policy service
-
Modifies security service
-
Event Triggered Execution: Image File Execution Options Injection
-
Impair Defenses: Safe Mode Boot
-
Windows security modification
-
Modifies Security services
Modifies the startup behavior of a security service.
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
6Windows Service
6Event Triggered Execution
1Image File Execution Options Injection
1Privilege Escalation
Create or Modify System Process
6Windows Service
6Event Triggered Execution
1Image File Execution Options Injection
1