General

  • Target

    k7181966exeexeexeexeexeex.exe

  • Size

    94KB

  • Sample

    230711-wqv3ksad63

  • MD5

    18a9d5c869c91db3a938ca73adbb213e

  • SHA1

    cb0f8460bb758a4504126e56c9f1388478ffee0e

  • SHA256

    5663e9591fddb6d2a1be991e54cf9e12d2401e123e515999564dfe315e16227b

  • SHA512

    a9194044130d6b50e7f56156c4c308627380586a3dce908602fe52e1f27e18fc81334e936053810f56ece3828711c9a17f16d198b2b294f6e333185344c82386

  • SSDEEP

    1536:PnCzgx3/uZmvXmkYl21afunyydopYgTX7qQwH7PxE:azkvsmvauYunyy6YgTXejxE

Malware Config

Targets

    • Target

      k7181966exeexeexeexeexeex.exe

    • Size

      94KB

    • MD5

      18a9d5c869c91db3a938ca73adbb213e

    • SHA1

      cb0f8460bb758a4504126e56c9f1388478ffee0e

    • SHA256

      5663e9591fddb6d2a1be991e54cf9e12d2401e123e515999564dfe315e16227b

    • SHA512

      a9194044130d6b50e7f56156c4c308627380586a3dce908602fe52e1f27e18fc81334e936053810f56ece3828711c9a17f16d198b2b294f6e333185344c82386

    • SSDEEP

      1536:PnCzgx3/uZmvXmkYl21afunyydopYgTX7qQwH7PxE:azkvsmvauYunyy6YgTXejxE

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

    • Modifies Windows Defender Real-time Protection settings

    • Windows security modification

MITRE ATT&CK Enterprise v6

Tasks