defendnot | 7f1e804c7e147c9d4b569c9545a725995a46727744eacd37d9437c8d6e71500e

General

Target
x64.zip
Size 3.4MB
Sample260930-vh2pqade69
SHA256 7f1e804c7e147c9d4b569c9545a725995a46727744eacd37d9437c8d6e71500e
MD5 3ca1a46a786ee1b287502144de032c99
SHA1 1816fd1f67303938aa210753134d892633bdf9de
SHA512 382aa8eb6f9cb57c42e132dcdaf2efdac2b1deeef0d35222a6f481fdc4dc83499ab001dcd3dd8dd94a7dd11b41cfd346b70203cd668bc2b94bc71afc29263c9b
SSDEEP 98304:6neLpxRAE2bKRPNqQ5hLLJ/slTlXT+mYVX2i3thLsy2:6neSrbnQ5Z5sTjVY2
TLSH
T1E6F533CF73E74CBB46CF7AF140366206E996A63D0EAF4781D202C7C267A9545814B87E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  defendnot-loader.exe
- Size 581KB
- SHA256 f57a4dd3bd3ce82eaf6d7143e837b3fa59a0accdac76fd3dc053433efdd50e5e
- MD5 aa636642fb9c479c7a9763d18862b12e
- SHA1 100d02103379ba284c465933394af8b55a90d0b1
- SHA512 b03126a3ff4809511388c787bdf6c65f22306840d8b1887924bc5ac0d1e52571cb832771260decbf6e115386aec8bda0b4434086d2b3f07f47f347f768a6db82
- SSDEEP 6144:iQbKLBXMhgqo62sYoFJqiE3Wy13avn7aC8xmph0lhSMXlBXBWnlgh7RB9PCn:/1sriq13UaZxmph0lhSMXli4v9m
- TLSH
  T14BC49D26B7A940F9E1A7C27889930A16EA737C4643516BCF03E44A675F236E04F3FB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1
- Target
  defendnot.dll
- Size 426KB
- SHA256 b0870e105c7ad37fb0bdcb9305279b2943810d55300e8721eb64bdaa588cc84e
- MD5 a9283ba8a7afa573b616856fcd00d597
- SHA1 904a26e329804812ea42e4a1bb2d62f9eaafcac2
- SHA512 81f47b5f5323b099e3c8b2b92576f41cfdde1a3204880f9bf5692dd04b6867ac79dd93c53b830afba5cebd4aeef20a1bee37a4cf57bedfcf67f551ac1f485e5b
- SSDEEP 6144:JJnzyCQ6dPBn6KjhoKUpMoAOOLph0lhSMXlBXBWnH7sLBQX1wLj:OCFJUHAOOLph0lhSMXliHoLSXS
- TLSH
  T11494AE15B7A590B9E16B8274C8570A05EB737C414791EBCF03A4DAB26F237D16B3EB02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  extra-strip.bat
- Size 2KB
- SHA256 4f77953b248bb6ecd3d20cebc8b5a4a0927cd0f8bc40225293778eb10e1dc198
- MD5 6b3336e8462bc35f30e6865cdd3b843a
- SHA1 e49ab6817d2d16178ccd6944a29b0fe528d3d739
- SHA512 69481820a32314d5130afd0353a732f333b903aafda8a5674a7a8c851f490b96d3326a7d78fdac2fd8c58a953eb7a52f04d8e2239f17936b489d7f4c6dfc642e
- TLSH
  T1B0414620A07F662AD3B2F680DC867E47EBEAB28360E243517BE771164543A8B443D5C6
- MD5 SHA1 SHA512 TLSH
Score

10^/10

defense_evasion evasion execution trojan
- Modifies Windows Defender DisableAntiSpyware settings
  evasion trojan
- Modifies Windows Defender Real-time Protection settings
  defense_evasion trojan
behavioral3