General
- Target fwidget.exe
- Size 4.2MB
- Sample260811-tt6mdattfw
- SHA256 98a305e8a7a8533ea096f391c0cc70953f007a5ee4eed8577536d670ecc4c3b3
- MD5 d74562a5680f6b328aae54019ccdb76a
- SHA1 2c0528a297affd2f4ea99eaccf892b4341f5f44b
- SHA512 5a8a5a4589af4c731bdc6973a763d92616a853a435ea5733cf4c28de70372b13e65306d0318f39607b0127e91c31069c898e05390dd50405c6317abd6ff30df9
- SSDEEP 98304:nmHGapHc4o9bR4hlNiBk1BAUZLGNy17KNkktANxYhhBTfvQW4Bokqa:nWdV2yJW8
- TLSH T10E169D43F2D268EDD667C134865B9733B735FC602612AF6B2524F6342E32EE02E48B55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
fwidget.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
fwidget.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target fwidget.exe
- Size 4.2MB
- SHA256 98a305e8a7a8533ea096f391c0cc70953f007a5ee4eed8577536d670ecc4c3b3
- MD5 d74562a5680f6b328aae54019ccdb76a
- SHA1 2c0528a297affd2f4ea99eaccf892b4341f5f44b
- SHA512 5a8a5a4589af4c731bdc6973a763d92616a853a435ea5733cf4c28de70372b13e65306d0318f39607b0127e91c31069c898e05390dd50405c6317abd6ff30df9
- SSDEEP 98304:nmHGapHc4o9bR4hlNiBk1BAUZLGNy17KNkktANxYhhBTfvQW4Bokqa:nWdV2yJW8
- TLSH T10E169D43F2D268EDD667C134865B9733B735FC602612AF6B2524F6342E32EE02E48B55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Contains code to disable Windows Defender
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.