General

  • Target

    1047fc72542a31f080d687f0c3513b1a35f645b7ab72f13c6aab8d02fb36a775

  • Size

    568KB

  • Sample

    230714-a6harsbg25

  • MD5

    131a6b2833bf6ecc08b02cc313545ff2

  • SHA1

    4e464fa663f913504d51492b3b7c4b7b2cf1741a

  • SHA256

    1047fc72542a31f080d687f0c3513b1a35f645b7ab72f13c6aab8d02fb36a775

  • SHA512

    be364942dd8a82525d5efa941474f4ff9eb9fb94a7e526fe549c280ac1e2b0b26a1397a6aff55620980415f2dd66465326e7f1252cf1b5b67d04e077000d3814

  • SSDEEP

    12288:fBeQVDGiICSVtg0wBW3iFt4ONq30/4St2NBd0JoLdaoi9Bbk:fBlGBbVTb34k30/8dRi9

Malware Config

Targets

    • Target

      1047fc72542a31f080d687f0c3513b1a35f645b7ab72f13c6aab8d02fb36a775

    • Size

      568KB

    • MD5

      131a6b2833bf6ecc08b02cc313545ff2

    • SHA1

      4e464fa663f913504d51492b3b7c4b7b2cf1741a

    • SHA256

      1047fc72542a31f080d687f0c3513b1a35f645b7ab72f13c6aab8d02fb36a775

    • SHA512

      be364942dd8a82525d5efa941474f4ff9eb9fb94a7e526fe549c280ac1e2b0b26a1397a6aff55620980415f2dd66465326e7f1252cf1b5b67d04e077000d3814

    • SSDEEP

      12288:fBeQVDGiICSVtg0wBW3iFt4ONq30/4St2NBd0JoLdaoi9Bbk:fBlGBbVTb34k30/8dRi9

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

    • Modifies Windows Defender Real-time Protection settings

    • Windows security modification

MITRE ATT&CK Enterprise v6

Tasks