General
- Target 6a1514608da27285fb383abc58bfab7226b72070b73e97d1babffd6ad0ae199e
- Size 2.7MB
- Sample260831-ffrpeaveld
- SHA256 6a1514608da27285fb383abc58bfab7226b72070b73e97d1babffd6ad0ae199e
- MD5 b6f92035023c72045acfc73be8ea1bfd
- SHA1 d0078d808e03330f24c631c602778080fdd04155
- SHA512 d14afda5a24b7ddf7afda78a3a31c22e95bd9660ae72775c001cbecf50173d9360dcc1f15363cdf26d464460c8e3b645338229b072b7ff1486504892e004ee30
- SSDEEP 49152:u/SL+2upjBVhbAbXMtQl/wLz8r5S5l7KdVSZ4eY83TAcm7:ISL+2upjBVGVl/lQrCSZ4183Dm
- TLSH T16ED5018033FC0548F2BF5B70A9B665504A77B9A7AD31D74D0A8920DD0B72B85EE61F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
6a1514608da27285fb383abc58bfab7226b72070b73e97d1babffd6ad0ae199e.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
6a1514608da27285fb383abc58bfab7226b72070b73e97d1babffd6ad0ae199e.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 6a1514608da27285fb383abc58bfab7226b72070b73e97d1babffd6ad0ae199e
- Size 2.7MB
- SHA256 6a1514608da27285fb383abc58bfab7226b72070b73e97d1babffd6ad0ae199e
- MD5 b6f92035023c72045acfc73be8ea1bfd
- SHA1 d0078d808e03330f24c631c602778080fdd04155
- SHA512 d14afda5a24b7ddf7afda78a3a31c22e95bd9660ae72775c001cbecf50173d9360dcc1f15363cdf26d464460c8e3b645338229b072b7ff1486504892e004ee30
- SSDEEP 49152:u/SL+2upjBVhbAbXMtQl/wLz8r5S5l7KdVSZ4eY83TAcm7:ISL+2upjBVGVl/lQrCSZ4183Dm
- TLSH T16ED5018033FC0548F2BF5B70A9B665504A77B9A7AD31D74D0A8920DD0B72B85EE61F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Contains code to disable Windows Defender
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.