02112026_0255_28092026_RENAULT_MEGANE_Araç_Tescil_ve_Ruhsat_Bilgileri[.]PDF 2[.]bat[.]rar

General

Target
02112026_0255_28092026_RENAULT_MEGANE_Araç_Tescil_ve_Ruhsat_Bilgileri.PDF 2.bat.rar
Size 1KB
Sample261102-deebksev8s
SHA256 332fd70920073a113aa9e2b9cfce1cca459132d40c3d96d3d5f21f2fea6a8c49
MD5 d8f6dcd8e8c604f5abc392927df22564
SHA1 7678c29a9a3b1cbd339241792d705f7eec5db09f
SHA512 3c0c72f98d2910a74b6a768468b36f45f9da257f797ffc8676aa1ee623936c09b58a34d28d436bc0735d7f3332295ec6df219854b6b63a4f5f1e2859f475c807
TLSH
T1D93108FB884CA66800E1DF59A226F20942B53E0DBB80FF1813E5C35D576F5900A4C62F
MD5 SHA1 SHA512 TLSH

Score

10^/10

Contains code to disable Windows Defender 1 IoCs

A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

resource	yara_rule
static1/unpack001/RENAULT_MEGANE_Araç_Tescil_ve_Ruhsat_Bilgileri.PDF 2.bat	disable_win_def

02112026_0255_28092026_RENAULT_MEGANE_Araç_Tescil_ve_Ruhsat_Bilgileri.PDF 2.bat.rar

.rar 1KB
RENAULT_MEGANE_Araç_Tescil_ve_Ruhsat_Bilgileri.PDF 2.bat

.bat 4KB

SHA256 332fd70920073a113aa9e2b9cfce1cca459132d40c3d96d3d5f21f2fea6a8c49
MD5 d8f6dcd8e8c604f5abc392927df22564
SHA1 7678c29a9a3b1cbd339241792d705f7eec5db09f
SHA512 3c0c72f98d2910a74b6a768468b36f45f9da257f797ffc8676aa1ee623936c09b58a34d28d436bc0735d7f3332295ec6df219854b6b63a4f5f1e2859f475c807
TLSH
T1D93108FB884CA66800E1DF59A226F20942B53E0DBB80FF1813E5C35D576F5900A4C62F
MD5 SHA1 SHA512 TLSH

Password

infected