General
- Target fwidget.exe
- Size 3.4MB
- Sample260810-p2agpagc42
- SHA256 8236468ba978f00b0867ae964b0341db486640e8ac45039600cf575c844c64d8
- MD5 d4db12599115289a7c41b7d971c218f1
- SHA1 8c1b2f08713b3ddbc8e15df2dfdab699dded2440
- SHA512 c147647bbb9a9a28e825596cb58f54c39ed60cec190aed08380a0b7f359a4b2216c2160f447a6c2e0e9259d81395c2c0555ea0ca8175fbc85cfdc81644c8ce83
- SSDEEP 49152:1n6mfqDfkEr0BwQQdJFarjp7WXp83Dyx/jI+3b5jQ5voOqX1BAUZLYgiU7IZGaXb:8dKwQQdra/kY0qobX1BAUZLGN
- TLSH T10AF59D43F2A361ECC627C13486576B33FA32FC2416216E7B6554FB352E72EA01B58B64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
fwidget.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
fwidget.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target fwidget.exe
- Size 3.4MB
- SHA256 8236468ba978f00b0867ae964b0341db486640e8ac45039600cf575c844c64d8
- MD5 d4db12599115289a7c41b7d971c218f1
- SHA1 8c1b2f08713b3ddbc8e15df2dfdab699dded2440
- SHA512 c147647bbb9a9a28e825596cb58f54c39ed60cec190aed08380a0b7f359a4b2216c2160f447a6c2e0e9259d81395c2c0555ea0ca8175fbc85cfdc81644c8ce83
- SSDEEP 49152:1n6mfqDfkEr0BwQQdJFarjp7WXp83Dyx/jI+3b5jQ5voOqX1BAUZLYgiU7IZGaXb:8dKwQQdra/kY0qobX1BAUZLGN
- TLSH T10AF59D43F2A361ECC627C13486576B33FA32FC2416216E7B6554FB352E72EA01B58B64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Contains code to disable Windows Defender
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.