MyTool[.]py-main[.]zip

resource	yara_rule
static1/unpack001/MyTool.py-main/mytool.py	disable_win_def

SHA256 8d12af02c4ef15dc8df9fcce1429f784785bc04886db59853555cdc6fb512c53
MD5 434f2b656848cf81401f865c821cd3f8
SHA1 0e77a9c1f38bd1fd02f758207862322fa095ebd4
SHA512 cbc9af6b04b03234aac8c6bc7dbd5bcf6ebc9dbd6ca8fd39cc4acea0edd406089299ba9213c892ad27110ec184a01ccceb61687d0760cb4c22c72679dba8df37
SSDEEP 1536:DmIE7ZJLAZjVndj2G5cFHfKNyfV+jAH+h+cIF:CL7PLAZjd5XTRRI
TLSH
T1FF530246B43005B9C17C0AB9FF4B6D5F7EB49C24200BAF3178659DB202DD662B6617BC
MD5 SHA1 SHA512 SSDEEP TLSH

Password

kili300

SHA256 2c47a9b56c46e37090409e0cad73aafb5d7ba65839e3a1cacc1f7f0cb3770918
MD5 99f6eddd06572127b6d11050e4b964c1
SHA1 4d998d10d6d240a6e93d16a7e6dec33ae8a1110e
SHA512 47254b0d9c4c467e785dcfb36482e7ee8365213fd394e4c64fc5efc447e4a91ab8ce7c76f051b2953e63201eb5247ff2d8ff181ae964f7c486a732fc6f7f7ca7
SSDEEP 384:tjE7vBJF1DIvUUaQEeW2+Hl4HdgzzB42YtgYcDJZFs:dE3DIvUzheqHl4Ha54eJo
TLSH
T1F8423A365FB1315717E3C2D7B243AE17FE28E109518A8058B8DE91AC039C5BCC6CD9BA
MD5 SHA1 SHA512 SSDEEP TLSH

SHA256 1ab301fdf142cc48cc63c338487bd6ff3d74312875dba9c88344ef515b6b609c
MD5 2a8034e75e4125645fe195f70682df82
SHA1 4add80763058a6bd6fbe113b848921c626a7b3c3
SHA512 a1be4b60e780193a6fb1497f2aae46686a387e63e218daf04a9f2b9986e981082c8d06152a7668c7acbb89ee8972d5cdbee35563f462efff66f15d087377b5c4
TLSH
T1BBB001AA87599D2346B91AA4A8F65349FA42136B4C800A52FA2C944CAFB24627588B09
MD5 SHA1 SHA512 TLSH

SHA256 2e919bcfebcb7b237594023ac142302207bea410f647fca87d98aeae335144a1
MD5 8eb7b2d28572bb581ba6646f4549e414
SHA1 8643016c6c2c877a0073e3eb09c50fc221c08b34
SHA512 d9a577d6719b409886a4a43f0a088903f381ff04b3c8be4efd447c36a3ff768f19e139b7c273b2343e9841a26f674b619c5e6f8c418bb88e76a184a631eb82ab
SSDEEP 3072:JrDyUyUsVxgWGjBhK1jQhWsKcRVDvdA6Dz5nqUCWTfbo5c5vu5be+ESzBMXkHuMu:lflojQhWkTkbe+E+MXe6n
TLSH
T13E34C627DC292C269172C95DA856D155FB2683079531160BBAFC83D82FBC736C3A0EBD
MD5 SHA1 SHA512 SSDEEP TLSH

Contains code to disable Windows Defender

A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

SHA256 968c5c839aeeef9a61eee171f7a0800b18346c32ccb33c125d95269ce33d384c
MD5 bfdf692547d2484cecb3ff0cd62daef8
SHA1 f3336c8de08bc21ad4d1af03e39ace5b21cc4edb
SHA512 b2de9152eeec97391b256ac2e55c541b4ab927b5542925b037d195cd81ce110f7bb724a8849c1f110d57f81571f6ec3599cbf7ae0cfdbf1fea1382943358b18f
SSDEEP 96:n2flKX6lpLmB200I0pAsx6J01e01SJkW1dlFy6kat/:2f5vbpAsgib7W3/
TLSH
T11A91FF5B75F8943113C2F727ED5052667922029F53212D5CB0AFC2B80B0DBA5BBEE6D0
MD5 SHA1 SHA512 SSDEEP TLSH

SHA256 b54b9e421b582ccc199569b51b434ed7d05444d0ae4ff0f7670e6a588bdc6327
MD5 180925e411863aeee0db732a73931cdc
SHA1 94d369223401ee8fc0537c9d966123ff03517e60
SHA512 cc6b5bfeedcc9b0442192af9d42e114248fe446a2da5e07ac8faa17621db1e516c0d484b47ed563cc181d35912b25368118b7108b7e3ff291eb01ba973fbb33e
SSDEEP 192:RArLBPomVwAA39W71HNoSF3lGjBoDVJC+ymQ:RASEwAsw1HNoc3lGjBoDVJC+g
TLSH
T1C6F144D67A08657551CBC1796CAE0211263B111F93809C1CB4AF82F80F3AB71FBEBB94
MD5 SHA1 SHA512 SSDEEP TLSH

linux polyglot

Sharing