General
- Target WindowsHostManager.exe
- Size 5.3MB
- Sample260913-qgzrhsvbja
- SHA256 996d572a44dada4f4f8f2d37ad0f271c7ec4a539804e56a7cd851ffc0161b3b0
Score
10/10
Malware Config
Targets
-
- Target WindowsHostManager.exe
- Size 5.3MB
- SHA256 996d572a44dada4f4f8f2d37ad0f271c7ec4a539804e56a7cd851ffc0161b3b0
Score10/10-
Modifies Windows Defender DisableAntiSpyware settings
-
Modifies Windows Defender Real-time Protection settings
-
Windows security bypass
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Windows security modification