General

  • Target

    668e7b829939749018ff05fd7a9943cff575198bfc3ea98c692e6902f085d990

  • Size

    146KB

  • Sample

    230716-tq4cvafe97

  • MD5

    203f84979bc84264aa3ef9e67f6272a1

  • SHA1

    c6476aa9616289415830f4c11cbecea0f5c4686b

  • SHA256

    668e7b829939749018ff05fd7a9943cff575198bfc3ea98c692e6902f085d990

  • SHA512

    fe9c9cc4f7b2db940f7442e5290cc1f2f7756e14a58fb7933668c34ab8560db209f2f5144ae09af7799b62d78a2554664f77f3eebfbd88fe59f1dfa800a0b072

  • SSDEEP

    3072:r+hqj696ixzzLwjiR7ZwelYpKj/rlxlfuoLXfHXW:rCpKjiRVwz8huorPXW

Malware Config

Targets

    • Target

      668e7b829939749018ff05fd7a9943cff575198bfc3ea98c692e6902f085d990

    • Size

      146KB

    • MD5

      203f84979bc84264aa3ef9e67f6272a1

    • SHA1

      c6476aa9616289415830f4c11cbecea0f5c4686b

    • SHA256

      668e7b829939749018ff05fd7a9943cff575198bfc3ea98c692e6902f085d990

    • SHA512

      fe9c9cc4f7b2db940f7442e5290cc1f2f7756e14a58fb7933668c34ab8560db209f2f5144ae09af7799b62d78a2554664f77f3eebfbd88fe59f1dfa800a0b072

    • SSDEEP

      3072:r+hqj696ixzzLwjiR7ZwelYpKj/rlxlfuoLXfHXW:rCpKjiRVwz8huorPXW

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

    • Modifies Windows Defender Real-time Protection settings

    • Windows security modification

MITRE ATT&CK Enterprise v6

Tasks